<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="205"><package pkgid="cf95b0e3d1aae3141bdaf7c26ca7b8fa42489e587c301a5129773eeef9bef658" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="a26ce0f7e70f44a8d8f774e897c72ee180060a96dba6bd0753c0cd76cb43f94e" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="24e95523d98033aad5d0a11f4d231a79040ccbbcfa26bca07231bae374e1bb3b" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="3e9747aff114c43378e7b1e8f66cd4e1c30149310252e03e8b253ef13d2080bf" name="apache2" arch="src">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="7bc576b8e67d1e4756000679b27187696a269682e466c10d12289f97dee489cf" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="743b8abeb6512b552e2bb627887e47c8f2f858375067563ae5f5fb3699b2bd54" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="bc1ebfb5426d14e823d72ba84e0b3357e098f5bb37cb0c4cd8ca4a4d67c75d1e" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="812d06aaa33b33f4f8d7d88e7def5d02395efe119bb6150d5dfd16e9d5be003d" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="ffc967e68c37d14201522c7725fce9dd0cbce3b4fb60f73d24add7cd5c815406" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="791bd823f2106c5281218b541319ff89bf0d8865043c1a7ac1cd28cf97f76147" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="9b467870d3abce21cd825e4fb5d9b482f2684aa1b777a548888d3111a339bbc2" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="ce5115a1f220c71b35968eb5785b95de8e673f3120aaf0ed6a5847a2357289af" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="f11c5b2c49fc898fd0874d30ea62a69a139d4a22481527100d83c8a0df56619a" name="catdoc" arch="src">
    <version epoch="0" ver="0.95" rel="10.1"/>

<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
<changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
<changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
<changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
<changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>

</package>
<package pkgid="7d377b4dc51db3874b495ea4e45c9921add905af8427cbf324552ea177ba5126" name="catdoc" arch="x86_64">
    <version epoch="0" ver="0.95" rel="10.1"/>

<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
<changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
<changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
<changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
<changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>

</package>
<package pkgid="282d2ab69afa508e6f7a10efc341a85fad175fb2f8a8832d65c1597e01c3dbeb" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="60.0.3112.78" rel="107.1"/>

<changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
<changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
<changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
<changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
<changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
<changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="d79737f8a32f2c95b4e3a0684fe6ffecdff5569f29e0e2841b9d8d83ce4b0802" name="chromium" arch="src">
    <version epoch="0" ver="60.0.3112.78" rel="107.1"/>

<changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
<changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
<changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
<changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
<changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
<changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="fabb4636f0e86d8fcc4472d6d68382f42abbd0931b391d6cc9c6157ea0475bf9" name="chromium" arch="x86_64">
    <version epoch="0" ver="60.0.3112.78" rel="107.1"/>

<changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
<changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
<changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
<changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
<changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
<changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="ff41e2558d15d223939ed0d34c77a00c4659883385225afab7956d67f32a66f5" name="coolkey" arch="src">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="398adc2b5fdb6fbd1f2fac0dceb3747a67f1a1fa5d3e599dc77f76d9c34f0133" name="coolkey" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="440aa3d7d19e4ec95a1b03cc339b785f9b5b87e7611e646a701bda5205f8c08d" name="coolkey-32bit" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="ba365e459f5490a4e11116c3fd839d0e1f4ffa89883e00a0ced818ba41009323" name="coolkey-devel" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="d5341990a5260d768221158f8634d979d5f90d76ff1618cc20350666a1ff772a" name="dracut" arch="src">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="e3d230b5e79de0a603d1f5e4916760c965c908cf0d890fc1ebeb944ef1fb6c33" name="dracut" arch="x86_64">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="1adfb7dd28c51b5f3c1b7cbb0c22754bc001dfce635d0ccd13cadaa5f43d1c88" name="dracut-fips" arch="x86_64">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="0298e691b206eac4e1d083b5462d89461c5bd60de85acd34e63522520cfceb69" name="dracut-tools" arch="x86_64">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="2e7ae4b2cad6e4cdac0d0a22754fc8c7df992c5f7c431a2eb631b09162373814" name="enlightenment-theme-openSUSE" arch="noarch">
    <version epoch="0" ver="20170726" rel="3.1"/>

<changelog author="simon@simotek.net" date="1387713600">- update for e18 and elementary</changelog>
<changelog author="simon@simotek.net" date="1388577600">- 20131230
  - Fix LED color in IBox
  - Fixed folder icon to suite the theme better</changelog>
<changelog author="simon@simotek.net" date="1392724800">- conflicts with older e17 themes</changelog>
<changelog author="simon@simotek.net" date="1392984000">- Fix the mess that was branding</changelog>
<changelog author="simon@simotek.net" date="1393070400">- can't conflict with e17 themes as e17 needs it for terminology etc</changelog>
<changelog author="simon@simotek.net" date="1393156800">- don't require enlightenment, this is bad when the theme is only being used
  by elementary, especially if someone is trying to install e17</changelog>
<changelog author="simon@simotek.net" date="1402574400">- Update theme for elementary 1.10 (Also supports e19)</changelog>
<changelog author="simon@simotek.net" date="1410523200">- New theme for openSUSE 13.2, old theme will soon be in oliveleaf
  package
  Brings in changes for elementary 1.11 as well as some e19 fixes</changelog>
<changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence
- Fix Init logo</changelog>
<changelog author="simon@simotek.net" date="1433937600">- At the recomendation of DimStar Obsolete but don't provide e17 themes</changelog>
<changelog author="simon@simotek.net" date="1445169600">- Updated colors / branding for leap
  Update to 1.15 upstream changes</changelog>
<changelog author="simon@simotek.net" date="1445515200">- Fix build script for factory, now using awk which is more robust</changelog>
<changelog author="simon@simotek.net" date="1445860800">- Add some debug for when it fails in staging</changelog>
<changelog author="simon@simotek.net" date="1448971200">- Finally have a version working on Factory again. 20151201</changelog>
<changelog author="simon@simotek.net" date="1449921600">- Minor fix to make the build file consistent 20151212</changelog>
<changelog author="simon@simotek.net" date="1450267200">- Minor Fix to terminology script shouldn't effect this 20151216</changelog>
<changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
<changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
<changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
<changelog author="sflees@suse.de" date="1501070400">- Fix regression in previous release borders boo#1050560</changelog>

</package>
<package pkgid="50b16f82e4efaf2db02a49c5ab90473a5ecc084c90b26f36b9af23144656e2b8" name="enlightenment-theme-openSUSE" arch="src">
    <version epoch="0" ver="20170726" rel="3.1"/>

<changelog author="simon@simotek.net" date="1387713600">- update for e18 and elementary</changelog>
<changelog author="simon@simotek.net" date="1388577600">- 20131230
  - Fix LED color in IBox
  - Fixed folder icon to suite the theme better</changelog>
<changelog author="simon@simotek.net" date="1392724800">- conflicts with older e17 themes</changelog>
<changelog author="simon@simotek.net" date="1392984000">- Fix the mess that was branding</changelog>
<changelog author="simon@simotek.net" date="1393070400">- can't conflict with e17 themes as e17 needs it for terminology etc</changelog>
<changelog author="simon@simotek.net" date="1393156800">- don't require enlightenment, this is bad when the theme is only being used
  by elementary, especially if someone is trying to install e17</changelog>
<changelog author="simon@simotek.net" date="1402574400">- Update theme for elementary 1.10 (Also supports e19)</changelog>
<changelog author="simon@simotek.net" date="1410523200">- New theme for openSUSE 13.2, old theme will soon be in oliveleaf
  package
  Brings in changes for elementary 1.11 as well as some e19 fixes</changelog>
<changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence
- Fix Init logo</changelog>
<changelog author="simon@simotek.net" date="1433937600">- At the recomendation of DimStar Obsolete but don't provide e17 themes</changelog>
<changelog author="simon@simotek.net" date="1445169600">- Updated colors / branding for leap
  Update to 1.15 upstream changes</changelog>
<changelog author="simon@simotek.net" date="1445515200">- Fix build script for factory, now using awk which is more robust</changelog>
<changelog author="simon@simotek.net" date="1445860800">- Add some debug for when it fails in staging</changelog>
<changelog author="simon@simotek.net" date="1448971200">- Finally have a version working on Factory again. 20151201</changelog>
<changelog author="simon@simotek.net" date="1449921600">- Minor fix to make the build file consistent 20151212</changelog>
<changelog author="simon@simotek.net" date="1450267200">- Minor Fix to terminology script shouldn't effect this 20151216</changelog>
<changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
<changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
<changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
<changelog author="sflees@suse.de" date="1501070400">- Fix regression in previous release borders boo#1050560</changelog>

</package>
<package pkgid="199fd5de107b9db59028b732e328f4914777a4b55c26e6c9db69b7214c4bc3e4" name="gnome-packagekit" arch="src">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="607caa9308183b2a6bf724d258fd09aeb7fba4a97e68a7c9ac08f6a6213a6565" name="gnome-packagekit" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="e91c0eaf23ae680334356ff869336d69e12b3135cf6edea63b8f00b45ceeb70e" name="gnome-packagekit-extras" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="4bff354c8c42d48eb28518866daca995c91ddc373e234d2ce24b0d98b0f4406a" name="gnome-packagekit-lang" arch="noarch">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="3ff62903213b91132a8083c4ee623b3d2d18f60549f83b38b0b5709fae8fe620" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.1" rel="15.1"/>

<changelog author="axel.braun@gmx.de" date="1421928000">- version 2.8</changelog>
<changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>

</package>
<package pkgid="b0fc841fa75c160e586ec8e9c771f5a0cdec85a641195de0037bc2d3f6483812" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.1" rel="15.1"/>

<changelog author="axel.braun@gmx.de" date="1421928000">- version 2.8</changelog>
<changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>

</package>
<package pkgid="67b8774823cb228a45573bd21eb5bbed93f05fddc20aa84cb7c958b68d0ae921" name="gsoap" arch="src">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="40c66fecab0f0dd24c6b373bb76c7fb82a370f55aa0041f4a0dbb089c6cac1fe" name="gsoap-devel" arch="x86_64">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="48c50ce7d3edd367df2beaccf3e1a82bdd1cb74a45a0d8b6a91606b6906b2ff2" name="gsoap-doc" arch="noarch">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="0f2bb6a3cbf1b453f41d1edf16d3901630a5fbcd8692dd44d04c945a333abad3" name="iptables" arch="src">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="17c7332a089791f5a7616c14ab4a53f4af3fe145e531522938712648ffc3a5c4" name="iptables" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="65b61e75c8cf8ee7ccc52fe9e50904975a75cb48a42b257ea5f76ebc5e0bb182" name="jasper" arch="src">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="2de44eaeda47c2d02d9080fd7295415c0a05c030609f3fd59af80bba2b6f8eab" name="jasper" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="7f13925a00a68c90770a553eeac44a4739dea504188a8feb182a83e5bb8ec560" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="7d2e4329288e308cdce950c6aee72819adc65960b516dfc1022b918c2c225edb" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="8f221e36372771f40194354cbdb65c61dbaeac449dd75a1540fcdbb670ca2501" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="29345a90702ae67d669f2961fb25aff16e005b75cd015e8236ad98e135f399ed" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="14f86ee008fac24f90ea0954885d150e22e6e60dcf1c6423dac9df31b712ed81" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="07b2651e80a533cb73cb95a6c464f2d72f2bc70a800202df68dcb6a2ccd8136e" name="libXi" arch="src">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="fab628815bba86ff21e837fe90c2a227f3e4d089aa65f1d35b60849c71a07aa6" name="libXi-devel" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="1fd223bef278ff7fcb16b0101e184ecbd3e5dd884960a11461b2696a56a605c5" name="libXi-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="e426709ca0e06b9a82a88997eae2c786a19fe77f0b5e50e6725a3ca7f9a115c6" name="libXi6" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="1134c2f6a860ea3eadd5d50593a4ae7759fbb63110b58af209a511cee41cd101" name="libXi6-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="dd319d36be22f6cfdbf0fe66e34df5ae054039178316cd9202d96fab6aea69f3" name="libgsoap-2_8_46" arch="x86_64">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="1a35d831a7403e05e221a98437434e6f98156eaf27e64b8b5e169a3269150fa5" name="libical" arch="src">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@suse.de" date="1231761600">- Update to version 0.43:
  + Incorporates bugfixes submitted by the GNOME Evolution team.
  + New API call icaltimezone_set_tzid_prefix() to allow downstream
    applications to generate tzid's with custom namespaces.</changelog>
<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="2aff03782ee4e186d1c03482f0abdf3a9b8c391cf74d3e1a4283bdde903cf158" name="libical-devel" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="dd354f50297b0e810df218152782cb8c92335619cdcdf163f290eee5f373226a" name="libical-devel-static" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="77ef855a07f9a0ea6a33a386cd95e514580b027b5ada3ef9439f63009404855d" name="libical-doc" arch="noarch">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="cece2b666437a70a276ce67b95325ab18db6e22f97e0e4bc2d7e0068e3acc780" name="libical1" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="c0229ab13b9478d138fcf665395ef6ea35f2934bc30367ee33d7be4ed9e7e545" name="libical1-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="5ae4870947651a7a72f639a4337ab407cd9da36f9ee2c585fb7ada1fd1016e50" name="libipq-devel" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="58e59cc5a5df92c7469e8148aad166a0bb4676a68350799424067d793e3aee4c" name="libipq0" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="7f5fff7a5416430e04f7ef151bb20369a8f5a92a7ca90bb43749d0a1ea9105bd" name="libiptc-devel" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="ea76295d1250703c7a5ebe713cb0f157f504279b82b6d9073187f0dd4f5d6b91" name="libiptc0" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="bb30b743501202f66b034507e42ca172e539604bd030b7ef322d5d48b2d4c58e" name="libjasper-devel" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="bb3ed9a0b6206470d2ceb036b686de6d635fbe605e97a7f542efc8dbb4262d0f" name="libjasper1" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="b5f4e2da03bc2252709e4945f3a585702eb86d5c3ab3ab1044136bc9ef6f4a32" name="libjasper1-32bit" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="65c389b27bf20c437b7fb4a86e03fb2d423f3b877791aef2cef321b2079856c7" name="libkcapi" arch="src">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="18cb195a356373404e5d0693703bc4294fd60d6474964e96a8919c46ad79fd74" name="libkcapi-devel" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="417541a5dc2f3b4120a32413eee30ebdabc9e6608198d209b5a4de75b81339a6" name="libkcapi-tools" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="2ac9eacaed5ea6e3fedf7c74d7649bec7b0ab0df98d7d84963382677170c89f0" name="libkcapi0" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="3217bd4a26d3ebe4bb12771e851c0068c6f8503842435c86141f4a09f2a706d8" name="libmilter-doc" arch="noarch">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="96d91dfc9da61eda5df031f19307b83c826d886af3da8152896f54cef0141df7" name="libmilter1_0" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="c228d6e9d0a27cc3a8f628aa9b19ad60f21afc0d3d46387d50b67dedc1db6de8" name="libmpg123-0" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="198f2e731cc2bfb302443cd3cd97b91066f6568f22361a864fc98d448d481a98" name="libmpg123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="3656e6e4994e1e55a596fec9fb36bb8816f0767b66624cd71260b40cf220d2ce" name="libmysql56client18" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="e70aff1dee40e36cbac0dd33f013912396afbe3a4f093d75f97a2c5d61274a76" name="libmysql56client18-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="2624e3e2be6bbb1d01b9e4e60b72f089682722399d0624698edc69ba0766fd27" name="libmysql56client_r18" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="cbb14b4919bcf6f0733be23eafc30626adc613a0632a78f69c04481263739443" name="libmysql56client_r18-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="1bfbbda3c48dc84a49c768576b51d4f2316ced4f063ddf5deee66472d89bdf23" name="libout123-0" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="d4b84eaf20dbabcf2e7b88d8745b2e8e88bed08859076ae64e42496c6ebcd66d" name="libout123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="f7b65b4c0a4c4f804cdb10bcd15c6f13737254f2dd94343f1866fbedae09133f" name="libprocps3" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="af36c8514b64c34ac9b4101dad9a650fa3f876af0260f27e4fe03ae614e5ecfd" name="libsystemd0" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="cb1e623913baf539e0e50b5a1bc2446dd997ff1ceef8670de399f466fec987c0" name="libsystemd0-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="f78d2098fb677f9bcfa8e8c6c3323e6db22921498f49b24b28435c053c0fe024" name="libsystemd0-mini" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="211d240a3c0f65477a655ec5013cbfd550a7f7e8139fe78cf8b9102af3fad442" name="libudev-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="c330bf83857fc86f9d5fe26d5370dfed2566f93edebb18a0185dfe9196dfdf60" name="libudev-mini-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="f4ae868e1e785b2c6d1b59f180f27f0e5022ba337086263dab557c84d7c9146c" name="libudev-mini1" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="ab0747e947fd86c3e06bdd9c3f32cfce9fbcdb8ed3f42afe867ca7e5ffdb8c2b" name="libudev1" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="55664ee1ef78aaf90d0af8908c2bbe3096f2670d76d078f66860676b3d1b04e2" name="libudev1-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="26d5b459bfd9963fa3538640437b271c29e5dbdee0bc9eb6b2d34bba077af960" name="libxtables-devel" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="dc55608053e179158169046eab8af142aac70294899d07dcba4372bad55de5a8" name="libxtables10" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="f04dffb17b37714ad70299e54e38c8bd2eb98efce7d8e0da3030336ac5848ac2" name="lxc" arch="src">
    <version epoch="0" ver="1.1.5" rel="19.1"/>

<changelog author="opensuse_buildservice@ojkastl.de" date="1408104000">- third patch to get lxc-autostart-helper to work on openSUSE
  * 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1411819200">- update to 1.0.6, which includes the following changes/fixes:
    rootfs_is_blockdev: don't run if no rootfs is specified
    confile: sanity-check netdev-&gt;type before setting netdev-&gt;priv elements
    Fix typo in previous patch
    Remove mention of mountcgroups in ubuntu.common config
    remove mountcgroup hook entirely
    Add SIGPWR support to lxc_init
    Sysvinit script fixes
    unprivileged containers: use next available nic name if unspecified
    fix typo in btrfs error msg
    apparmor: Allow slave bind mounts
    provide an example SELinux policy for older releases
    print a helpful message if creating unpriv container with no idmap
    use non-thread-safe getpwuid and getpwgid for android
    btrfs: support recursive subvolume deletion (v2)
    fix '--log-priority' --&gt; '--logpriority' in main
    Fix a file descriptor leak in the daemonization
    Fix a file descriptor leak in the monitord spawn
    Ensure /dev/pts directory exists on pts setup
    Do not allow snapshots of LVM backed containers
    add lxc.console.logpath
    coverity: don't use newname after null check
    coverity: malloc the right size for btrs_node tree
    introduce --with-distro=raspbian
    cgmanager get/set: clean up child (v2)
    Add extra debugging
    Fix typo in the previous commit...
    do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount
    command socket: use hash if needed
    monitor: fix sockname calculation for long lxcpaths
    show additional info if btrfs subvolume deletion fails (issue #315)
    ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\) - issue #313
    chmod container dir to 0770 (v2)
    build: Fix support for split build and source dirs
    mount_entry: use statvfs
    lxc_mount_auto_mounts: honor existing nodev etc at remounts
    statvfs: do nothing if statvfs does not exist (android/bionic)
    Prevent compiler warning by initializing ifindex
    build: don't remove configuration template on clean
    build: Make setup.py run from srcdir to avoid distutils errors
    handle hashed command socket names (v2)
    lxc-cgm: fix issue with nested chowning
    Report container exit status to monitord
    support use of 'all' containers when cgmanager supports it
    log: fix quiet mode
    Fix build error(ISO C90 specs violation) in lxc.c
    lxc_map_ids: don't do bogus chekc for newgidmap
    lxc_map_ids: add a comment
    clean autodev dir on container exit
    As discussed on ML, do not clean autodev dir on reboot
    Fix build failure due to slightly different rmdir
    Fix presentation of IPv6 addresses and gateway
    lxc-start: Add -F (foreground) option
    all: Discontinue the use of in-line comments (stable)
    all: Include hostname in DHCP requests
    all: Switch from arch command to uname -m
    altlinux: bugfixes
    archlinux: Properly set default locale in /etc/locale.conf
    centos template: prevent mingetty from calling vhangup(2)
    download: Have wget retry 3 times
    download: Make --keyserver actually work
    gentoo: keep original uid/gid of files/dirs when installing
    gentoo: Use portageq to determine portage distdir
    plamo: keep original uid/gid of files/dirs when installing
    plamo: bugfix template
    ssh: send hostname to dhcp server
    ubuntu: don't check for $rootfs/run/shm
    ubuntu: add help string
    lxc-test-{unpriv,usernic.in}: make sure to chgrp as well
    lxc-test-unpriv: test lxc-clone -s
    tests: Call sync before testing a shutdown
    tests: Copy the download cache when available [v2]
    Fix the unprivileged tests cgroup management
    doc: Mention that veth.pair is ignored for unpriv
    doc: Add mention that veth.pair is ignored for unpriv in Japanese man
    doc: Add -F option to Japanese lxc-start(1)
    doc: Update the description of SELinux in Japanese lxc.container.conf(5)
    doc: Add 'zfs' to the parameter of -B option in lxc-create(1)
    doc: add lxc.console.logpath to Japanese lxc.container.conf(5)
    doc: language correction
    doc: Fix Japanese translation of lxc.container.conf(5)
    doc: Add destroy option to lxc-snapshot(1)
    doc: Add description about ignoring lxc.cgroup.use when using cgmanager
- delete: 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch
- delete: 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1414411200">- added 0001-added-upstream-action-fallback-create-directory-loca.patch
  * adds action fallback available upstream
  * creates directory /run/lock/subsys/ if not available
- deleted 0001-systemd-Ensure-action-is-defined.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1416398400">- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch
  Disable building opensuse containers on openSUSE 13.2 due to changed
  build behaviour (bsc#905638)</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417003200">- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2
  * 0003-lxc-opensuse-template-now-understands-release-argume.patch
  * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
  * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417262400">- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417867200">- update to version 1.0.7
  Core:
  Include network prefix when ipv4/ipv6 keys are queried
  apparmor: silence 'silent' mount denials
  add file/func/line to debug info
  apparmor: restrict signal and ptrace for processes
  cgmanager: several fixes
  lxc: don't call pivot_root if / is on a ramfs
  fix lxc.mount.auto clearing
  conf.c: Define MS_PRIVATE for Android
  network: convert param ifname to const.
  network: check result of if_nametoindex().
  network: allow lxc_network_move_by_index() rename netdev in moving.
  network: introduce a interface named lxc_netdev_isup().
  lxccontainer.c: rename enter_to_ns to enter_net_ns
  lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root
  do_rootfs_setup: fix return bugs
  lxc-start: don't re-try to mount rootfs if we already did so
  attach: don't use confstr(_CS_PATH)
  lxc_global_config_value: simplify the theme
  Fixed mismatch on ipvX gateway
  attach: don't ignore sigint/sigkill if stdin is redirected
  cgmanager: fix 'attach' with "all" controller support
  lxc/utils: bugfix freed pointer return value
  conf.c: change 'instanciate' to 'instantiate'
  fix wrong nlmsg_len
  Remounts bind mounts if read-only flag is provided
  Allow lxc_clear_config_item to clear idmaps.
  overlay and aufs clone_paths: be more robust
  overlayfs: overlayfs.v22 or higher needs workdir option
  Fix clone issues
  Improve veth error cases logging
  fixed typo in comment
  audit: added capacity and reserve() to nlmsg
  rmdir and lxc_unpriv returns non-negative error codes
  typofixes - https://github.com/vlajos/misspell_fixer
  Bindings:
  add src/python-lxc/setup.py into .gitignore
  Tests:
    tests: Fix unpriv test
    lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet
    lxc-test-unpriv: test for different cgroups per subsystem
    tests: try again when waitpid() sets errno as EINTR
  Commands:
  lxc_start: ERROR if container is already running.
  lxc-start: return 0 rather than error if container is already running
  Make legacy lxc-ls more robust
  lxc_info: flush stdout before calling routines which may fork
  Templates:
  Fix typo in lxc-gentoo template
  busybox template: support for unprivileged containers
  busybox template: mount fstab when available
  Fix another gentoo template typo
  Create the apt proxy in the cache instead of the 1st container
  lxc-plamo: mount tmpfs on /dev/shm
  lxc-cirros: support creating+running unprivileged
  Fix lxc-openmandriva.in typo.
  Fix lxc-centos.in typo.
  lxc-opensuse: Disable on 13.2
  lxc-alpine: make sure /dev/shm is world writeable
  lxc-alpine: create a default tty for console
  lxc-debian: added support for package installation
  lxc-debian: Fix default mirrors
  lxc-debian: support systemd as PID 1
  lxc-debian: adjust init system configurations
  lxc-debian: mask both Wheezy and Jessie udev services
  lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved.
  Documentation:
  Fix the lxc manpage a bit
  lxc-create -t option is not optional
  doc: Update kernel and cgroup info in Japanese lxc(7)
  tabs/spaces consistency</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417953600">- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418385600">- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon
  Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817600">- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120
  Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817601">- Improved error message</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in lxc-autostart-helper script
- add patches:
  + lxc-1.0.7-fix-bashisms.patch</changelog>
<changelog author="jslaby@suse.com" date="1437480000">- update to 1.1.2
- Removed 0001-added-upstream-action-fallback-create-directory-loca.patch
- Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch
- Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
- Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch
- Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch
- Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="jslaby@suse.com" date="1437652800">- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch
  (bnc#938522)
- Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523)
- Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch
  (bnc#938523)</changelog>
<changelog author="jslaby@suse.com" date="1438776000">- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1443787200">- Added CVE-2015-1335-Protect-container-mounts-against-symlinks.patch
  (bsc#946744)</changelog>
<changelog author="asarai@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  CVE-2016-8649-attach-do-not-send-procfd-to-attached-process.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1485604800">- Update to version 1.1.5
  All patches except lxc-1.0.7-fix-bashisms.patch are upstream and were thus deleted
- fixes for boo#1019662
  added openSUSE_apparmor_mount.conf
  added apparmor reload in %post, necessary as the package installs apparmor-related files</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1490702400">- fix for boo#1028264
  added patch 0001-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1500465600">- fix for boo#1036360
  - added Requires for apparmor and BuildRequires for apparmor-rpm-macros
  - changed %post section to recommendation by cboltz</changelog>

</package>
<package pkgid="c46709963517f30211c1c27ae4fa8f3a5c691baa527d2c6f2a403ce8971f76fc" name="lxc" arch="x86_64">
    <version epoch="0" ver="1.1.5" rel="19.1"/>

<changelog author="opensuse_buildservice@ojkastl.de" date="1408104000">- third patch to get lxc-autostart-helper to work on openSUSE
  * 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1411819200">- update to 1.0.6, which includes the following changes/fixes:
    rootfs_is_blockdev: don't run if no rootfs is specified
    confile: sanity-check netdev-&gt;type before setting netdev-&gt;priv elements
    Fix typo in previous patch
    Remove mention of mountcgroups in ubuntu.common config
    remove mountcgroup hook entirely
    Add SIGPWR support to lxc_init
    Sysvinit script fixes
    unprivileged containers: use next available nic name if unspecified
    fix typo in btrfs error msg
    apparmor: Allow slave bind mounts
    provide an example SELinux policy for older releases
    print a helpful message if creating unpriv container with no idmap
    use non-thread-safe getpwuid and getpwgid for android
    btrfs: support recursive subvolume deletion (v2)
    fix '--log-priority' --&gt; '--logpriority' in main
    Fix a file descriptor leak in the daemonization
    Fix a file descriptor leak in the monitord spawn
    Ensure /dev/pts directory exists on pts setup
    Do not allow snapshots of LVM backed containers
    add lxc.console.logpath
    coverity: don't use newname after null check
    coverity: malloc the right size for btrs_node tree
    introduce --with-distro=raspbian
    cgmanager get/set: clean up child (v2)
    Add extra debugging
    Fix typo in the previous commit...
    do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount
    command socket: use hash if needed
    monitor: fix sockname calculation for long lxcpaths
    show additional info if btrfs subvolume deletion fails (issue #315)
    ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\) - issue #313
    chmod container dir to 0770 (v2)
    build: Fix support for split build and source dirs
    mount_entry: use statvfs
    lxc_mount_auto_mounts: honor existing nodev etc at remounts
    statvfs: do nothing if statvfs does not exist (android/bionic)
    Prevent compiler warning by initializing ifindex
    build: don't remove configuration template on clean
    build: Make setup.py run from srcdir to avoid distutils errors
    handle hashed command socket names (v2)
    lxc-cgm: fix issue with nested chowning
    Report container exit status to monitord
    support use of 'all' containers when cgmanager supports it
    log: fix quiet mode
    Fix build error(ISO C90 specs violation) in lxc.c
    lxc_map_ids: don't do bogus chekc for newgidmap
    lxc_map_ids: add a comment
    clean autodev dir on container exit
    As discussed on ML, do not clean autodev dir on reboot
    Fix build failure due to slightly different rmdir
    Fix presentation of IPv6 addresses and gateway
    lxc-start: Add -F (foreground) option
    all: Discontinue the use of in-line comments (stable)
    all: Include hostname in DHCP requests
    all: Switch from arch command to uname -m
    altlinux: bugfixes
    archlinux: Properly set default locale in /etc/locale.conf
    centos template: prevent mingetty from calling vhangup(2)
    download: Have wget retry 3 times
    download: Make --keyserver actually work
    gentoo: keep original uid/gid of files/dirs when installing
    gentoo: Use portageq to determine portage distdir
    plamo: keep original uid/gid of files/dirs when installing
    plamo: bugfix template
    ssh: send hostname to dhcp server
    ubuntu: don't check for $rootfs/run/shm
    ubuntu: add help string
    lxc-test-{unpriv,usernic.in}: make sure to chgrp as well
    lxc-test-unpriv: test lxc-clone -s
    tests: Call sync before testing a shutdown
    tests: Copy the download cache when available [v2]
    Fix the unprivileged tests cgroup management
    doc: Mention that veth.pair is ignored for unpriv
    doc: Add mention that veth.pair is ignored for unpriv in Japanese man
    doc: Add -F option to Japanese lxc-start(1)
    doc: Update the description of SELinux in Japanese lxc.container.conf(5)
    doc: Add 'zfs' to the parameter of -B option in lxc-create(1)
    doc: add lxc.console.logpath to Japanese lxc.container.conf(5)
    doc: language correction
    doc: Fix Japanese translation of lxc.container.conf(5)
    doc: Add destroy option to lxc-snapshot(1)
    doc: Add description about ignoring lxc.cgroup.use when using cgmanager
- delete: 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch
- delete: 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1414411200">- added 0001-added-upstream-action-fallback-create-directory-loca.patch
  * adds action fallback available upstream
  * creates directory /run/lock/subsys/ if not available
- deleted 0001-systemd-Ensure-action-is-defined.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1416398400">- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch
  Disable building opensuse containers on openSUSE 13.2 due to changed
  build behaviour (bsc#905638)</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417003200">- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2
  * 0003-lxc-opensuse-template-now-understands-release-argume.patch
  * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
  * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417262400">- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417867200">- update to version 1.0.7
  Core:
  Include network prefix when ipv4/ipv6 keys are queried
  apparmor: silence 'silent' mount denials
  add file/func/line to debug info
  apparmor: restrict signal and ptrace for processes
  cgmanager: several fixes
  lxc: don't call pivot_root if / is on a ramfs
  fix lxc.mount.auto clearing
  conf.c: Define MS_PRIVATE for Android
  network: convert param ifname to const.
  network: check result of if_nametoindex().
  network: allow lxc_network_move_by_index() rename netdev in moving.
  network: introduce a interface named lxc_netdev_isup().
  lxccontainer.c: rename enter_to_ns to enter_net_ns
  lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root
  do_rootfs_setup: fix return bugs
  lxc-start: don't re-try to mount rootfs if we already did so
  attach: don't use confstr(_CS_PATH)
  lxc_global_config_value: simplify the theme
  Fixed mismatch on ipvX gateway
  attach: don't ignore sigint/sigkill if stdin is redirected
  cgmanager: fix 'attach' with "all" controller support
  lxc/utils: bugfix freed pointer return value
  conf.c: change 'instanciate' to 'instantiate'
  fix wrong nlmsg_len
  Remounts bind mounts if read-only flag is provided
  Allow lxc_clear_config_item to clear idmaps.
  overlay and aufs clone_paths: be more robust
  overlayfs: overlayfs.v22 or higher needs workdir option
  Fix clone issues
  Improve veth error cases logging
  fixed typo in comment
  audit: added capacity and reserve() to nlmsg
  rmdir and lxc_unpriv returns non-negative error codes
  typofixes - https://github.com/vlajos/misspell_fixer
  Bindings:
  add src/python-lxc/setup.py into .gitignore
  Tests:
    tests: Fix unpriv test
    lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet
    lxc-test-unpriv: test for different cgroups per subsystem
    tests: try again when waitpid() sets errno as EINTR
  Commands:
  lxc_start: ERROR if container is already running.
  lxc-start: return 0 rather than error if container is already running
  Make legacy lxc-ls more robust
  lxc_info: flush stdout before calling routines which may fork
  Templates:
  Fix typo in lxc-gentoo template
  busybox template: support for unprivileged containers
  busybox template: mount fstab when available
  Fix another gentoo template typo
  Create the apt proxy in the cache instead of the 1st container
  lxc-plamo: mount tmpfs on /dev/shm
  lxc-cirros: support creating+running unprivileged
  Fix lxc-openmandriva.in typo.
  Fix lxc-centos.in typo.
  lxc-opensuse: Disable on 13.2
  lxc-alpine: make sure /dev/shm is world writeable
  lxc-alpine: create a default tty for console
  lxc-debian: added support for package installation
  lxc-debian: Fix default mirrors
  lxc-debian: support systemd as PID 1
  lxc-debian: adjust init system configurations
  lxc-debian: mask both Wheezy and Jessie udev services
  lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved.
  Documentation:
  Fix the lxc manpage a bit
  lxc-create -t option is not optional
  doc: Update kernel and cgroup info in Japanese lxc(7)
  tabs/spaces consistency</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417953600">- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418385600">- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon
  Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817600">- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120
  Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817601">- Improved error message</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in lxc-autostart-helper script
- add patches:
  + lxc-1.0.7-fix-bashisms.patch</changelog>
<changelog author="jslaby@suse.com" date="1437480000">- update to 1.1.2
- Removed 0001-added-upstream-action-fallback-create-directory-loca.patch
- Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch
- Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
- Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch
- Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch
- Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="jslaby@suse.com" date="1437652800">- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch
  (bnc#938522)
- Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523)
- Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch
  (bnc#938523)</changelog>
<changelog author="jslaby@suse.com" date="1438776000">- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1443787200">- Added CVE-2015-1335-Protect-container-mounts-against-symlinks.patch
  (bsc#946744)</changelog>
<changelog author="asarai@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  CVE-2016-8649-attach-do-not-send-procfd-to-attached-process.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1485604800">- Update to version 1.1.5
  All patches except lxc-1.0.7-fix-bashisms.patch are upstream and were thus deleted
- fixes for boo#1019662
  added openSUSE_apparmor_mount.conf
  added apparmor reload in %post, necessary as the package installs apparmor-related files</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1490702400">- fix for boo#1028264
  added patch 0001-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1500465600">- fix for boo#1036360
  - added Requires for apparmor and BuildRequires for apparmor-rpm-macros
  - changed %post section to recommendation by cboltz</changelog>

</package>
<package pkgid="3d6492ea387f0dad4c375d59df39b306106559513dbba793c0a6a114fc03c8e3" name="lxc-devel" arch="x86_64">
    <version epoch="0" ver="1.1.5" rel="19.1"/>

<changelog author="opensuse_buildservice@ojkastl.de" date="1408104000">- third patch to get lxc-autostart-helper to work on openSUSE
  * 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1411819200">- update to 1.0.6, which includes the following changes/fixes:
    rootfs_is_blockdev: don't run if no rootfs is specified
    confile: sanity-check netdev-&gt;type before setting netdev-&gt;priv elements
    Fix typo in previous patch
    Remove mention of mountcgroups in ubuntu.common config
    remove mountcgroup hook entirely
    Add SIGPWR support to lxc_init
    Sysvinit script fixes
    unprivileged containers: use next available nic name if unspecified
    fix typo in btrfs error msg
    apparmor: Allow slave bind mounts
    provide an example SELinux policy for older releases
    print a helpful message if creating unpriv container with no idmap
    use non-thread-safe getpwuid and getpwgid for android
    btrfs: support recursive subvolume deletion (v2)
    fix '--log-priority' --&gt; '--logpriority' in main
    Fix a file descriptor leak in the daemonization
    Fix a file descriptor leak in the monitord spawn
    Ensure /dev/pts directory exists on pts setup
    Do not allow snapshots of LVM backed containers
    add lxc.console.logpath
    coverity: don't use newname after null check
    coverity: malloc the right size for btrs_node tree
    introduce --with-distro=raspbian
    cgmanager get/set: clean up child (v2)
    Add extra debugging
    Fix typo in the previous commit...
    do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount
    command socket: use hash if needed
    monitor: fix sockname calculation for long lxcpaths
    show additional info if btrfs subvolume deletion fails (issue #315)
    ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\) - issue #313
    chmod container dir to 0770 (v2)
    build: Fix support for split build and source dirs
    mount_entry: use statvfs
    lxc_mount_auto_mounts: honor existing nodev etc at remounts
    statvfs: do nothing if statvfs does not exist (android/bionic)
    Prevent compiler warning by initializing ifindex
    build: don't remove configuration template on clean
    build: Make setup.py run from srcdir to avoid distutils errors
    handle hashed command socket names (v2)
    lxc-cgm: fix issue with nested chowning
    Report container exit status to monitord
    support use of 'all' containers when cgmanager supports it
    log: fix quiet mode
    Fix build error(ISO C90 specs violation) in lxc.c
    lxc_map_ids: don't do bogus chekc for newgidmap
    lxc_map_ids: add a comment
    clean autodev dir on container exit
    As discussed on ML, do not clean autodev dir on reboot
    Fix build failure due to slightly different rmdir
    Fix presentation of IPv6 addresses and gateway
    lxc-start: Add -F (foreground) option
    all: Discontinue the use of in-line comments (stable)
    all: Include hostname in DHCP requests
    all: Switch from arch command to uname -m
    altlinux: bugfixes
    archlinux: Properly set default locale in /etc/locale.conf
    centos template: prevent mingetty from calling vhangup(2)
    download: Have wget retry 3 times
    download: Make --keyserver actually work
    gentoo: keep original uid/gid of files/dirs when installing
    gentoo: Use portageq to determine portage distdir
    plamo: keep original uid/gid of files/dirs when installing
    plamo: bugfix template
    ssh: send hostname to dhcp server
    ubuntu: don't check for $rootfs/run/shm
    ubuntu: add help string
    lxc-test-{unpriv,usernic.in}: make sure to chgrp as well
    lxc-test-unpriv: test lxc-clone -s
    tests: Call sync before testing a shutdown
    tests: Copy the download cache when available [v2]
    Fix the unprivileged tests cgroup management
    doc: Mention that veth.pair is ignored for unpriv
    doc: Add mention that veth.pair is ignored for unpriv in Japanese man
    doc: Add -F option to Japanese lxc-start(1)
    doc: Update the description of SELinux in Japanese lxc.container.conf(5)
    doc: Add 'zfs' to the parameter of -B option in lxc-create(1)
    doc: add lxc.console.logpath to Japanese lxc.container.conf(5)
    doc: language correction
    doc: Fix Japanese translation of lxc.container.conf(5)
    doc: Add destroy option to lxc-snapshot(1)
    doc: Add description about ignoring lxc.cgroup.use when using cgmanager
- delete: 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch
- delete: 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1414411200">- added 0001-added-upstream-action-fallback-create-directory-loca.patch
  * adds action fallback available upstream
  * creates directory /run/lock/subsys/ if not available
- deleted 0001-systemd-Ensure-action-is-defined.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1416398400">- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch
  Disable building opensuse containers on openSUSE 13.2 due to changed
  build behaviour (bsc#905638)</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417003200">- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2
  * 0003-lxc-opensuse-template-now-understands-release-argume.patch
  * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
  * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417262400">- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417867200">- update to version 1.0.7
  Core:
  Include network prefix when ipv4/ipv6 keys are queried
  apparmor: silence 'silent' mount denials
  add file/func/line to debug info
  apparmor: restrict signal and ptrace for processes
  cgmanager: several fixes
  lxc: don't call pivot_root if / is on a ramfs
  fix lxc.mount.auto clearing
  conf.c: Define MS_PRIVATE for Android
  network: convert param ifname to const.
  network: check result of if_nametoindex().
  network: allow lxc_network_move_by_index() rename netdev in moving.
  network: introduce a interface named lxc_netdev_isup().
  lxccontainer.c: rename enter_to_ns to enter_net_ns
  lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root
  do_rootfs_setup: fix return bugs
  lxc-start: don't re-try to mount rootfs if we already did so
  attach: don't use confstr(_CS_PATH)
  lxc_global_config_value: simplify the theme
  Fixed mismatch on ipvX gateway
  attach: don't ignore sigint/sigkill if stdin is redirected
  cgmanager: fix 'attach' with "all" controller support
  lxc/utils: bugfix freed pointer return value
  conf.c: change 'instanciate' to 'instantiate'
  fix wrong nlmsg_len
  Remounts bind mounts if read-only flag is provided
  Allow lxc_clear_config_item to clear idmaps.
  overlay and aufs clone_paths: be more robust
  overlayfs: overlayfs.v22 or higher needs workdir option
  Fix clone issues
  Improve veth error cases logging
  fixed typo in comment
  audit: added capacity and reserve() to nlmsg
  rmdir and lxc_unpriv returns non-negative error codes
  typofixes - https://github.com/vlajos/misspell_fixer
  Bindings:
  add src/python-lxc/setup.py into .gitignore
  Tests:
    tests: Fix unpriv test
    lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet
    lxc-test-unpriv: test for different cgroups per subsystem
    tests: try again when waitpid() sets errno as EINTR
  Commands:
  lxc_start: ERROR if container is already running.
  lxc-start: return 0 rather than error if container is already running
  Make legacy lxc-ls more robust
  lxc_info: flush stdout before calling routines which may fork
  Templates:
  Fix typo in lxc-gentoo template
  busybox template: support for unprivileged containers
  busybox template: mount fstab when available
  Fix another gentoo template typo
  Create the apt proxy in the cache instead of the 1st container
  lxc-plamo: mount tmpfs on /dev/shm
  lxc-cirros: support creating+running unprivileged
  Fix lxc-openmandriva.in typo.
  Fix lxc-centos.in typo.
  lxc-opensuse: Disable on 13.2
  lxc-alpine: make sure /dev/shm is world writeable
  lxc-alpine: create a default tty for console
  lxc-debian: added support for package installation
  lxc-debian: Fix default mirrors
  lxc-debian: support systemd as PID 1
  lxc-debian: adjust init system configurations
  lxc-debian: mask both Wheezy and Jessie udev services
  lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved.
  Documentation:
  Fix the lxc manpage a bit
  lxc-create -t option is not optional
  doc: Update kernel and cgroup info in Japanese lxc(7)
  tabs/spaces consistency</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417953600">- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418385600">- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon
  Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817600">- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120
  Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817601">- Improved error message</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in lxc-autostart-helper script
- add patches:
  + lxc-1.0.7-fix-bashisms.patch</changelog>
<changelog author="jslaby@suse.com" date="1437480000">- update to 1.1.2
- Removed 0001-added-upstream-action-fallback-create-directory-loca.patch
- Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch
- Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
- Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch
- Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch
- Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="jslaby@suse.com" date="1437652800">- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch
  (bnc#938522)
- Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523)
- Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch
  (bnc#938523)</changelog>
<changelog author="jslaby@suse.com" date="1438776000">- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1443787200">- Added CVE-2015-1335-Protect-container-mounts-against-symlinks.patch
  (bsc#946744)</changelog>
<changelog author="asarai@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  CVE-2016-8649-attach-do-not-send-procfd-to-attached-process.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1485604800">- Update to version 1.1.5
  All patches except lxc-1.0.7-fix-bashisms.patch are upstream and were thus deleted
- fixes for boo#1019662
  added openSUSE_apparmor_mount.conf
  added apparmor reload in %post, necessary as the package installs apparmor-related files</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1490702400">- fix for boo#1028264
  added patch 0001-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1500465600">- fix for boo#1036360
  - added Requires for apparmor and BuildRequires for apparmor-rpm-macros
  - changed %post section to recommendation by cboltz</changelog>

</package>
<package pkgid="7996473ea486ea1e760d527d4dd89533572632900c3e21415ba08e03aadf46c3" name="mpg123" arch="src">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="80f5a816de42f6ae5d6dbb8c45bbfa810f4eb59a07a011294f64d66eeac91e63" name="mpg123" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="d034f9cc213eddbe0044bc7271e3329a556062f8bd2715a50a9585d255b24331" name="mpg123-devel" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="a8594517bb5aa85ff48b5021e75769e942c51d4a64ce4abdbf0e9d3d4b8708c5" name="mpg123-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="df999b96017751ea037b59a76d9d8978a87478ddb5115350df0351e1c969e26e" name="mpg123-esound" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="baf697902ae284711e6a17a5e6f33543d6ee6927cb5cb478d71f8d7390a145d8" name="mpg123-esound-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="03fe22ac39d01e38929c84f7dc0ffb80d1d67911d67081a1246e76480dfeb86f" name="mpg123-jack" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="f8333c6be932d213025e99d5ac09e5e57d0ee59f61bd50149b6aa1820d4a7ca5" name="mpg123-jack-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="36ce635cfaca9856565217dbfeb6a90a3513bf38f37c8d831b727eb056744562" name="mpg123-openal" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="639ef73df4993e243fcc23c349fde3fd2f6feac281df5b673a7961e70e0a040e" name="mpg123-openal-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="918b0170b3e69b828438db784c2079c0b8b4f2b3f4492076d1585e7882e7d872" name="mpg123-portaudio" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="734d7c7d58e63991e433cff12abfbde667cc2ff430ae3052d0b78eeaa267c411" name="mpg123-portaudio-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="2feb4b2408ebcfd7c968d339a4cab8166437db4f62f0e39a8b3c1cb8c90ed113" name="mpg123-pulse" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="02a2c9471286ddb01d4bb8a67a506cd318c8eba8345c5dff067249813aec3795" name="mpg123-pulse-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="554b589f636e5f1cfdcb98c04c1415f09b2b45013ceef8f07a40187740fed299" name="mpg123-sdl" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="7318d9b35e59d05e0f448569cd56d65925115f43dfa92a6a35cb6872e4e81cf1" name="mpg123-sdl-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="d652abd5c02386c45bea6ff6f884fc3d81671d87f8e46603e1994048bd95df0e" name="mysql-community-server" arch="src">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="084a55741fdccb24a5ec433330179529049e1df931fec8f62476f7cf766a8810" name="mysql-community-server" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="66dc6fe15e78a1861245e25e8ee84ad572cd80888b2f1a7f90babec2fdae5fed" name="mysql-community-server-bench" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="d44751ad3c6331144641c66ff2817ce122c6c95ab97355529328d2f22614dc3e" name="mysql-community-server-client" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="df8b7a02a58076682f7e7b8616980799c8dce3b44bb308c07e72ef5bc38276dc" name="mysql-community-server-errormessages" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="1268d19d0f21693175c9ed9864f82e53a12640af10214fc92eb74be989dbdf3f" name="mysql-community-server-test" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="a4789bf330bf963930370ddbfb24280fddb5dedd07b667a66bcf3b98959a4aef" name="mysql-community-server-tools" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="a4e5f40ce5a81a8d571eb6dfee2b3704422cdd1e6eb5069509d8fff2726132b2" name="nss-myhostname" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="c52c431070e10e895e7c533a5f3525df9cac4ea6a1672409809761c3b893c106" name="nss-myhostname-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="cd75d79b7e2171cf53507eccbae2a88d72fc2aacf320b1aacad18a1b4f780c0f" name="nss-mymachines" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="3be9cf072777617bdec496f96bcaf78e2cd79a8b2cdee4e093cded23fb3705ba" name="oidentd" arch="src">
    <version epoch="0" ver="2.0.8" rel="153.1"/>

<changelog author="lmuelle@suse.de" date="1079524800">- inital SuSE RPM</changelog>
<changelog author="mc@suse.de" date="1096545600">- Add missing PreReq (#46479)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lmuelle@suse.de" date="1156766400">- Update to version 2.0.8.
  + Removed spaces between commas and colons from responses.
  + Pulled in patches for Linux from Debian.
  + Open masquerading options before dropping permissions on linux.</changelog>
<changelog author="lmuelle@suse.de" date="1259064000">- Package the init script with 0755 permissions; (bnc#557358).</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="p.drouand@gmail.com" date="1405684800">- Use systemd instead of sysvinit for openSUSE &gt;= 12.1
- Do not copy the INSTALL file in package documentation; user doesn't
  install from sources
- Get rid of depreciated stuff</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="lmuelle@suse.com" date="1446984000">- Really install the service and socket unit configuration files; (boo#953608).</changelog>
<changelog author="p.drouand@gmail.com" date="1452340800">- Rename oidentd@.service to oidentd.service and hardcode variables;
  (boo#953608)
- Add back support for sysconfig in the service file</changelog>

</package>
<package pkgid="c6eb9df29869a981c5f8f54cf1339cbaa173243437e629c5e587f812a6bcb165" name="oidentd" arch="x86_64">
    <version epoch="0" ver="2.0.8" rel="153.1"/>

<changelog author="lmuelle@suse.de" date="1079524800">- inital SuSE RPM</changelog>
<changelog author="mc@suse.de" date="1096545600">- Add missing PreReq (#46479)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lmuelle@suse.de" date="1156766400">- Update to version 2.0.8.
  + Removed spaces between commas and colons from responses.
  + Pulled in patches for Linux from Debian.
  + Open masquerading options before dropping permissions on linux.</changelog>
<changelog author="lmuelle@suse.de" date="1259064000">- Package the init script with 0755 permissions; (bnc#557358).</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="p.drouand@gmail.com" date="1405684800">- Use systemd instead of sysvinit for openSUSE &gt;= 12.1
- Do not copy the INSTALL file in package documentation; user doesn't
  install from sources
- Get rid of depreciated stuff</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="lmuelle@suse.com" date="1446984000">- Really install the service and socket unit configuration files; (boo#953608).</changelog>
<changelog author="p.drouand@gmail.com" date="1452340800">- Rename oidentd@.service to oidentd.service and hardcode variables;
  (boo#953608)
- Add back support for sysconfig in the service file</changelog>

</package>
<package pkgid="e60a65b3d1a38f92b5a495a487ee496f371f4a87a51cd5b9b01848082f51601c" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="6c5c19fdf22debe6e82840027aac1040f469bd410a318c31ca28f12c9d46a0f5" name="procps" arch="src">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="01a4998f5a56f65ba3237569822044ac91a30d961e87711b4298707bb8389f33" name="procps" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="60ad170f54baef5772c7f13663ad2ded5051596329cabe994154058c1fa03a30" name="procps-devel" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="d95de8d07a7529b8a9f86d618d6cf7036cabf979dcc2f7d57bf728a9e3ddb194" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="fc8987ba95e367b747116da1c7491a4e770e45075a8ab148e7b51c4ad15cd005" name="python-websockify" arch="noarch">
    <version epoch="0" ver="0.8.0" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1358424000">- Initial version</changelog>
<changelog author="cfarrell@suse.com" date="1358510400">- license update: LGPL-3.0 and MPL-2.0 and BSD-2-Clause and BSD-3-Clause
  See LICENSE.txt</changelog>
<changelog author="dmueller@suse.com" date="1367236800">- update to 0.4.1:
  * add include/ directory and remove some dev files from source
    distribution.
  * use Buffer base64 support in Node.js implementation</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- update to 0.5.1:
  * use upstream einaros/ws (&gt;=0.4.27) with websockify.js
  * file_only and no_parent security options for WSRequestHandler
  * Update build of web-socket-js (c0855c6cae)
  * add include/web-socket-js-project submodule to gimite/web-socket-js
    for DSFG compliance.
  * drop Hixie protocol support</changelog>
<changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="tbechtold@suse.com" date="1410868800">- update to version 0.6.0:
  * **NOTE** : 0.6.0 will break existing code that sub-classes WebsocketProxy
  * Refactor to use standard SocketServer RequestHandler design
  * Fix zombie process bug on certain systems when using multiprocessing
  * Add better unit tests
  * Log information via python `logging` module</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431604800">- update to version 0.6.1:
  * PATCH RELEASE: Fixes a bug causing file_only to not be passed
    properly
- switch archive to zip (tar.gz not available on pypi)
- add unzip as BuildRequires
- remove unwanted shebang in python files
- drop unneeded executable bit of web_socket.js</changelog>
<changelog author="seife+obs@b1-systems.com" date="1437825600">- fix non-SUSE build by conditionalizing "Recommends:" tag</changelog>
<changelog author="hguo@suse.com" date="1444046400">- Add missing dependency on python-setuptools</changelog>
<changelog author="dmueller@suse.com" date="1462190400">- update to 0.8.0:
  * Make websockify properly terminate children on SIGTERM (#226)
  * Remove logging in signal handlers (this can cause Python to hang under certain conditions) (#219)
  * Make it easier to log to a file (#205)
  * Add support for IPv6 addresses in tokens in the TokenFile token plugins (#197)
  * Improve auth plugin framework to enable better support for HTTP auth (#194, #201)
  * Fix bug in JSONTokenAPI token plugin (#192)
  * Fix a missing variable in the exception handler (#178)
  * Python 3 support fixes (#140, #155, #159)
  * Generic token-parsing plugins support (#162)
  * Generic authentication plugins support (#172)
  * Fixed frame corruption on big-endian systems (#161)
  * Support heartbeats (via PING) and automatic responses to PONG (#169)
  * Automatically reject unmasked client frames by default (strict mode) (#174)
  * Automatically restart interrupted select calls (#175)
  * Make 'run' respect environment settings (including virtualenv) (#176)</changelog>
<changelog author="dmueller@suse.com" date="1500724800">- drop dependency on pyOpenSSL, seems unused (bsc#1049987)</changelog>

</package>
<package pkgid="b7b48211bdb3fb0fba698d798c724d3290df5ebc2c91c8ec50d048d9d26b54af" name="python-websockify" arch="src">
    <version epoch="0" ver="0.8.0" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1358424000">- Initial version</changelog>
<changelog author="cfarrell@suse.com" date="1358510400">- license update: LGPL-3.0 and MPL-2.0 and BSD-2-Clause and BSD-3-Clause
  See LICENSE.txt</changelog>
<changelog author="dmueller@suse.com" date="1367236800">- update to 0.4.1:
  * add include/ directory and remove some dev files from source
    distribution.
  * use Buffer base64 support in Node.js implementation</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- update to 0.5.1:
  * use upstream einaros/ws (&gt;=0.4.27) with websockify.js
  * file_only and no_parent security options for WSRequestHandler
  * Update build of web-socket-js (c0855c6cae)
  * add include/web-socket-js-project submodule to gimite/web-socket-js
    for DSFG compliance.
  * drop Hixie protocol support</changelog>
<changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="tbechtold@suse.com" date="1410868800">- update to version 0.6.0:
  * **NOTE** : 0.6.0 will break existing code that sub-classes WebsocketProxy
  * Refactor to use standard SocketServer RequestHandler design
  * Fix zombie process bug on certain systems when using multiprocessing
  * Add better unit tests
  * Log information via python `logging` module</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431604800">- update to version 0.6.1:
  * PATCH RELEASE: Fixes a bug causing file_only to not be passed
    properly
- switch archive to zip (tar.gz not available on pypi)
- add unzip as BuildRequires
- remove unwanted shebang in python files
- drop unneeded executable bit of web_socket.js</changelog>
<changelog author="seife+obs@b1-systems.com" date="1437825600">- fix non-SUSE build by conditionalizing "Recommends:" tag</changelog>
<changelog author="hguo@suse.com" date="1444046400">- Add missing dependency on python-setuptools</changelog>
<changelog author="dmueller@suse.com" date="1462190400">- update to 0.8.0:
  * Make websockify properly terminate children on SIGTERM (#226)
  * Remove logging in signal handlers (this can cause Python to hang under certain conditions) (#219)
  * Make it easier to log to a file (#205)
  * Add support for IPv6 addresses in tokens in the TokenFile token plugins (#197)
  * Improve auth plugin framework to enable better support for HTTP auth (#194, #201)
  * Fix bug in JSONTokenAPI token plugin (#192)
  * Fix a missing variable in the exception handler (#178)
  * Python 3 support fixes (#140, #155, #159)
  * Generic token-parsing plugins support (#162)
  * Generic authentication plugins support (#172)
  * Fixed frame corruption on big-endian systems (#161)
  * Support heartbeats (via PING) and automatic responses to PONG (#169)
  * Automatically reject unmasked client frames by default (strict mode) (#174)
  * Automatically restart interrupted select calls (#175)
  * Make 'run' respect environment settings (including virtualenv) (#176)</changelog>
<changelog author="dmueller@suse.com" date="1500724800">- drop dependency on pyOpenSSL, seems unused (bsc#1049987)</changelog>

</package>
<package pkgid="a5d2de2c2bfd40222cf7d5aa21e948c241958a8129169a93b6d34dee76d7ef65" name="rmail" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="09a9c9a05f7b6d99399c2415566dfaf89eefdebb88fa5f8f5f3a3c90c423bc6b" name="ruby2.1-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="7573a0ce1af2e22358ddc201c5d9dfb6ca4875eed6f1c3dea5b53d1a97c60898" name="ruby2.1-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1ce6f60ceba9e90fc9d02a532f3845269efe3eccde07d0e7d1467af2b36eb395" name="ruby2.1-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="23190509b29c2a2ff0612520cc059635c4e194e24ad025c14bdcfa5714ca87b1" name="ruby2.2-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="eb63f2527774da721cccf6db088171b39f639bc3f43485f267e2a4fa3bc59e00" name="ruby2.2-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="be5af26dc3d3dc51ad42fb56dc23942fa8875db06a31179a98afdb9a3207f812" name="ruby2.2-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="183205c254cbae95a49b4519b298f8fc21c8c0188a6283dc717a6bba64687968" name="ruby2.3-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="27b281f283c177909994f29aca39e29ccd1b0909023f07913850731532a41e68" name="ruby2.3-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="9e8b3eca21a86378c9eb4acd816685d33fa2da2be0d87ce8874daefc0552a214" name="ruby2.3-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1333f549397e7ed20e89b490878f0a66f4f3aae579748d325656027e83f40840" name="ruby2.4-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="a1bce455b08cc762248ba8dfdb0f6c251cbbabcb92ebd8b4f5d97228b33de482" name="ruby2.4-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1f7f8ff08b49e365e1857caac6ce7825f1b99c30928baf4c31bc1b94286da52d" name="ruby2.4-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="c3bc167835c6881678e622878dde5d1ec992a59079020d805b594d5659784f7a" name="rubygem-puppet" arch="src">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1a80e331c6c4273523c203214008bc763a21a1bb6e07bf923dafd0a8ca423e31" name="rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="f77f0c6e08bd4323a3374d8b7d0d9a04b3b8767b17d05a45b495a643065c2d36" name="rubygem-puppet-emacs" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="f2db79e641ce607446e391444ce526083a3662d200f723bcc60524316c6d5bf5" name="rubygem-puppet-master" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="4e1f7e6b9a03abcb76c1b8f1eef09fff58c2a6b7b02c05c4a831cc23244e2dcc" name="rubygem-puppet-master-unicorn" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="190c4ed928512e1d687d9e36f0e96fa5f19f381727d906ec2f8ed8e3476aa914" name="rubygem-puppet-vim" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="e8e7ccd3750f6511218faddf04099724a070d6316aceafe9762fa5730b088a19" name="sendmail" arch="src">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="d8cd212ea6f8f8edda435057afcac72f34fb5cd505aa304d3bb7cebd8cad9087" name="sendmail" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="7a12d52852d2900d0f03c0861a04f5941991fe6d6df0ccf4c871afc377cf8936" name="sendmail-devel" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="48c3ce84c2275daf80310de738d0c6fe26fc7b9a9e49bdb3e0bd7036903fa527" name="sendmail-starttls" arch="noarch">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="92c7f2c5d509177fc327cf9e7b28a21393064ab9ef16a2a858a82b846bb38ef7" name="shotwell" arch="src">
    <version epoch="0" ver="0.22.0+git.20160103" rel="11.1"/>

<changelog author="dimstar@opensuse.org" date="1391601600">- Update to version 0.17.0:
  + Include parent folder names for keyword search.
  + Tumblr publishing fixed.
  + Bug fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 0.17.1:
  + Parent folder names as search keywords rolled back
    (bgo#722756).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 0.17.2:
  + UNIX pipe unnecessarily left open for each imported video.
  + Improved searching for event comments and diacritics.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1395230400">- Update to version 0.18.0:
  + Compile and install translated help files.
  + Updated translations.
- Add pkgconfig(gnome-doc-utils) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1404302400">- Update to version 0.18.1:
  + Fix Flickr publishing errors due to Flickr moving to HTTPs-only.
  + Fix crash when updating photo data/time.
  + Fix crash due to nested tag and changing sidebar selection.
  + Corrected URLs to point to new gnome.org pages.</changelog>
<changelog author="mgorse@suse.com" date="1406116800">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348 bgo#732964).</changelog>
<changelog author="mgorse@suse.com" date="1406116801">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348, bgo#732964).</changelog>
<changelog author="dimstar@opensuse.org" date="1406203200">- Add shotwell-vala.patch: Fix build with vala 0.25.1 (bgo#733650).</changelog>
<changelog author="dimstar@opensuse.org" date="1408708800">- Update to version 0.19.0:
  + Support for Rajce.net and Gallery 3 photo services added.
  + Set background image for lock screen.
  + Better detection of corrupt images during import.
  + Various bug fixes.
  + Updated translations.
- Drop upstream fixed patches shotwell-vala.patch and
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1411214400">- Update to version 0.20.0:
  + Fix crash when deleting a photo in Shotwell Photo Viewer.
  + Fix crash when deleting a photo.
  + Better detection of corrupt files while importing.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1412337600">- Update to version 0.20.1:
  + Correct problems with navigating photos in full-screen mode
    (bgo#737092).
  + Better memory utilization via more conservative pixbuf cache
    (bgo#715198).
  + Fixes minor bugs detected by better Vala code analysis.</changelog>
<changelog author="mgorse@suse.com" date="1412769600">- Add
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  Fix a crash when updating the date/time of a photo (bnc#899715).</changelog>
<changelog author="zaitor@opensuse.org" date="1414756800">- Update to version 0.20.2:
  + Set Desktop Slideshow dialog resource now included in
    distribution (bgo#739095).
  + Check for rendering failure in video thumbnailer (bgo#738245).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1422964800">- Update to version 0.21.0:
  + User interface refresh (bgo#742326, bgo#742443).
  + Fix Shotwell Viewer .desktop file (bgo#743799).
  + Natural sorting of photo titles (bgo#717960).
  + Improved video thumbnailer (bgo#739396, bgo#741821).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 0.22.0:
  + Improved metadata support for Facebook upload (bgo#742163).
  + Saved search now properly supports text is-set, not-set
    (bgo#743924, bgo#743923).
  + Import title, exposure time when available.
  + User interface improvements (bgo#744291, bgo#719284, more).
  + Sort photos by filename (bgo#717878).
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1440763200">- Add 0001-Shotwell-flickr-api-change-fix.patch
  Flickr's API has gone to HTTPS only, this patch backport upstream fix for it.
  (bnc#943559 bgo#732432)</changelog>
<changelog author="dimstar@opensuse.org" date="1452081600">- Update to version 0.22.0+git.20160103 (based on source service):
  + Port to webkit2gtk-4.0.
  + Don't pack webview into a scrolled window.
  + Have all soup sessions validate TLS certificates (boo#958382).
  + facebook: Don't disable XSS auditor.
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-4.0), following upstreams port to WebKit2.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Shotwell-flickr-api-change-fix.patch and
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  fixed upstream.</changelog>
<changelog author="mgorse@suse.com" date="1495627200">- add shotwell-facebook-id.patch: update Facebook id (bsc#943556
  bgo#748991).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499169600">- Add shotwell-service-selector-null.patch: Check that a widget
  isn't NULL before using it. (bsc#1040047 bgo#783250)</changelog>

</package>
<package pkgid="25aa807c15a344ec82e67fba37791aa072cf61e5fe4bcf51a70dab10be1236f3" name="shotwell" arch="x86_64">
    <version epoch="0" ver="0.22.0+git.20160103" rel="11.1"/>

<changelog author="dimstar@opensuse.org" date="1391601600">- Update to version 0.17.0:
  + Include parent folder names for keyword search.
  + Tumblr publishing fixed.
  + Bug fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 0.17.1:
  + Parent folder names as search keywords rolled back
    (bgo#722756).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 0.17.2:
  + UNIX pipe unnecessarily left open for each imported video.
  + Improved searching for event comments and diacritics.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1395230400">- Update to version 0.18.0:
  + Compile and install translated help files.
  + Updated translations.
- Add pkgconfig(gnome-doc-utils) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1404302400">- Update to version 0.18.1:
  + Fix Flickr publishing errors due to Flickr moving to HTTPs-only.
  + Fix crash when updating photo data/time.
  + Fix crash due to nested tag and changing sidebar selection.
  + Corrected URLs to point to new gnome.org pages.</changelog>
<changelog author="mgorse@suse.com" date="1406116800">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348 bgo#732964).</changelog>
<changelog author="mgorse@suse.com" date="1406116801">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348, bgo#732964).</changelog>
<changelog author="dimstar@opensuse.org" date="1406203200">- Add shotwell-vala.patch: Fix build with vala 0.25.1 (bgo#733650).</changelog>
<changelog author="dimstar@opensuse.org" date="1408708800">- Update to version 0.19.0:
  + Support for Rajce.net and Gallery 3 photo services added.
  + Set background image for lock screen.
  + Better detection of corrupt images during import.
  + Various bug fixes.
  + Updated translations.
- Drop upstream fixed patches shotwell-vala.patch and
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1411214400">- Update to version 0.20.0:
  + Fix crash when deleting a photo in Shotwell Photo Viewer.
  + Fix crash when deleting a photo.
  + Better detection of corrupt files while importing.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1412337600">- Update to version 0.20.1:
  + Correct problems with navigating photos in full-screen mode
    (bgo#737092).
  + Better memory utilization via more conservative pixbuf cache
    (bgo#715198).
  + Fixes minor bugs detected by better Vala code analysis.</changelog>
<changelog author="mgorse@suse.com" date="1412769600">- Add
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  Fix a crash when updating the date/time of a photo (bnc#899715).</changelog>
<changelog author="zaitor@opensuse.org" date="1414756800">- Update to version 0.20.2:
  + Set Desktop Slideshow dialog resource now included in
    distribution (bgo#739095).
  + Check for rendering failure in video thumbnailer (bgo#738245).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1422964800">- Update to version 0.21.0:
  + User interface refresh (bgo#742326, bgo#742443).
  + Fix Shotwell Viewer .desktop file (bgo#743799).
  + Natural sorting of photo titles (bgo#717960).
  + Improved video thumbnailer (bgo#739396, bgo#741821).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 0.22.0:
  + Improved metadata support for Facebook upload (bgo#742163).
  + Saved search now properly supports text is-set, not-set
    (bgo#743924, bgo#743923).
  + Import title, exposure time when available.
  + User interface improvements (bgo#744291, bgo#719284, more).
  + Sort photos by filename (bgo#717878).
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1440763200">- Add 0001-Shotwell-flickr-api-change-fix.patch
  Flickr's API has gone to HTTPS only, this patch backport upstream fix for it.
  (bnc#943559 bgo#732432)</changelog>
<changelog author="dimstar@opensuse.org" date="1452081600">- Update to version 0.22.0+git.20160103 (based on source service):
  + Port to webkit2gtk-4.0.
  + Don't pack webview into a scrolled window.
  + Have all soup sessions validate TLS certificates (boo#958382).
  + facebook: Don't disable XSS auditor.
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-4.0), following upstreams port to WebKit2.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Shotwell-flickr-api-change-fix.patch and
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  fixed upstream.</changelog>
<changelog author="mgorse@suse.com" date="1495627200">- add shotwell-facebook-id.patch: update Facebook id (bsc#943556
  bgo#748991).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499169600">- Add shotwell-service-selector-null.patch: Check that a widget
  isn't NULL before using it. (bsc#1040047 bgo#783250)</changelog>

</package>
<package pkgid="17c38ba1f5e64b04c87070ed5c6231ec4569dc59d90611f8b5fcca6e9e1b39b9" name="shotwell-lang" arch="noarch">
    <version epoch="0" ver="0.22.0+git.20160103" rel="11.1"/>

<changelog author="dimstar@opensuse.org" date="1391601600">- Update to version 0.17.0:
  + Include parent folder names for keyword search.
  + Tumblr publishing fixed.
  + Bug fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 0.17.1:
  + Parent folder names as search keywords rolled back
    (bgo#722756).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 0.17.2:
  + UNIX pipe unnecessarily left open for each imported video.
  + Improved searching for event comments and diacritics.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1395230400">- Update to version 0.18.0:
  + Compile and install translated help files.
  + Updated translations.
- Add pkgconfig(gnome-doc-utils) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1404302400">- Update to version 0.18.1:
  + Fix Flickr publishing errors due to Flickr moving to HTTPs-only.
  + Fix crash when updating photo data/time.
  + Fix crash due to nested tag and changing sidebar selection.
  + Corrected URLs to point to new gnome.org pages.</changelog>
<changelog author="mgorse@suse.com" date="1406116800">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348 bgo#732964).</changelog>
<changelog author="mgorse@suse.com" date="1406116801">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348, bgo#732964).</changelog>
<changelog author="dimstar@opensuse.org" date="1406203200">- Add shotwell-vala.patch: Fix build with vala 0.25.1 (bgo#733650).</changelog>
<changelog author="dimstar@opensuse.org" date="1408708800">- Update to version 0.19.0:
  + Support for Rajce.net and Gallery 3 photo services added.
  + Set background image for lock screen.
  + Better detection of corrupt images during import.
  + Various bug fixes.
  + Updated translations.
- Drop upstream fixed patches shotwell-vala.patch and
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1411214400">- Update to version 0.20.0:
  + Fix crash when deleting a photo in Shotwell Photo Viewer.
  + Fix crash when deleting a photo.
  + Better detection of corrupt files while importing.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1412337600">- Update to version 0.20.1:
  + Correct problems with navigating photos in full-screen mode
    (bgo#737092).
  + Better memory utilization via more conservative pixbuf cache
    (bgo#715198).
  + Fixes minor bugs detected by better Vala code analysis.</changelog>
<changelog author="mgorse@suse.com" date="1412769600">- Add
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  Fix a crash when updating the date/time of a photo (bnc#899715).</changelog>
<changelog author="zaitor@opensuse.org" date="1414756800">- Update to version 0.20.2:
  + Set Desktop Slideshow dialog resource now included in
    distribution (bgo#739095).
  + Check for rendering failure in video thumbnailer (bgo#738245).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1422964800">- Update to version 0.21.0:
  + User interface refresh (bgo#742326, bgo#742443).
  + Fix Shotwell Viewer .desktop file (bgo#743799).
  + Natural sorting of photo titles (bgo#717960).
  + Improved video thumbnailer (bgo#739396, bgo#741821).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 0.22.0:
  + Improved metadata support for Facebook upload (bgo#742163).
  + Saved search now properly supports text is-set, not-set
    (bgo#743924, bgo#743923).
  + Import title, exposure time when available.
  + User interface improvements (bgo#744291, bgo#719284, more).
  + Sort photos by filename (bgo#717878).
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1440763200">- Add 0001-Shotwell-flickr-api-change-fix.patch
  Flickr's API has gone to HTTPS only, this patch backport upstream fix for it.
  (bnc#943559 bgo#732432)</changelog>
<changelog author="dimstar@opensuse.org" date="1452081600">- Update to version 0.22.0+git.20160103 (based on source service):
  + Port to webkit2gtk-4.0.
  + Don't pack webview into a scrolled window.
  + Have all soup sessions validate TLS certificates (boo#958382).
  + facebook: Don't disable XSS auditor.
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-4.0), following upstreams port to WebKit2.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Shotwell-flickr-api-change-fix.patch and
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  fixed upstream.</changelog>
<changelog author="mgorse@suse.com" date="1495627200">- add shotwell-facebook-id.patch: update Facebook id (bsc#943556
  bgo#748991).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499169600">- Add shotwell-service-selector-null.patch: Check that a widget
  isn't NULL before using it. (bsc#1040047 bgo#783250)</changelog>

</package>
<package pkgid="46e6eee38dd7e1648f6473a0d2648a78e31b7c9a1dcf101fa7bff6747362df9e" name="smartmontools" arch="src">
    <version epoch="0" ver="6.5" rel="8.1"/>

<changelog author="sbrabec@suse.cz" date="1353412800">- Re-introduce smartmontools-sysconfig.patch with
  SMARTD_SAVESTATES, SMARTD_ATTRLOG and SMARTD_EXTRA_OPTS sysconfig
  variables (bnc#790044).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1355313600">- Use sysconfig variables (sed on smartd.service.in) and generate
  smartd_opts for systemd smartd.service.
- Remove obsolete parsing of /etc/default/smartmontools
  (it is no more in upstream installation).</changelog>
<changelog author="sbrabec@suse.cz" date="1363608000">- Update to version 6.1:
  * smartctl -l improved.
  * smartctl -s/-g wcache and rcache for SCSI devices.
  * smartctl prints more info for ATA and SCSI devices.
  * smartctl '--identify' updated for latest ATA ACS-3 spec.
  * smartd runs /etc/smartd_warning.sh to generate warning emails.
  * smartd '-w PATH' option to specify this executable.
  * smartd '-d ignore' directive.
  * smartd DEVICESCAN ignores devices already specified.
  * smartd: added support for -s and -A for SCSI devices.
  * smartd '-W' directive uses ATA attribute 190 if 194 is missing.
  * Support of larger SCSI defect lists via READ DEFECT(12).
  * Device type '-d usbjmicron,p' for Prolific USB bridges.
  * Many HDD, SSD and USB additions to drive database.
  * Support for SAS disks behind Areca controllers.
  * Improved support for SATA disks on LSI/Megaraid controllers.
  * Disks on MegaRaid controllers are automatically scanned.
- smartmontools.keyring: New signing key for the next 2 years.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365076800">- remove all sysvinit support.</changelog>
<changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="sbrabec@suse.cz" date="1375099200">- Update to version 6.2:
  * smartctl: Added ATA write cache reordering control using
    '-g wcreorder' and '-s wcreorder,[on|off]' options.
  * update-smart-drivedb: Updated for new SVN repository.
  * HDD, SSD and USB additions to drive database.
  * Areca RAID support: Fixed possible segfault on empty port.
  * HPT RAID support: Maximum disk number increased to 128.</changelog>
<changelog author="sbrabec@suse.com" date="1386244800">- Add supplementary drivedb.h update script
  (smartmontools-drivedb_h-update.sh, bnc#851276).
- Skip drivedb.h verification by rpm -V (bnc#851276).
- Implement intelligent drivedb.h update not overwriting newer
  drivedb.h releases.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch trunk.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.</changelog>
<changelog author="ro@suse.de" date="1409745600">- update to version 6.3
  - smartctl: Fixed bogus error messages from '-g/-s wcreorder'.
  - smartctl prints ATA form factor.
  - SCSI: Improved support of modern disks (SAS SSDs).
  - SCSI: Fixed sense data noise from old disks.
  - update-smart-drivedb man page.
  - configure option '--with-smartdscriptdir'.
  - configure option '--with-smartdplugindir'.
  - configure option '--with-systemdenvfile'.
  - configure option '--with-working-snprintf'.
  - Removed build time stamps to support reproducible builds.
  - Compile fixes for C++11.
  - HDD, SSD and USB additions to drive database.
  - Linux: Support for controllers behind AACRAID driver.
  - Linux: Fixed DEVICESCAN max path count.
  - FreeBSD: Fixed possible crash caused by wrong SCSI error handling.
  - FreeBSD: Compile fix for kFreeBSD.
  - Windows: Reworked CSMI port scanning.
  - QNX: Compile fix.
- dropped patches:
  smartmontools-nobuild-date.patch (code removed upstream)</changelog>
<changelog author="ro@suse.de" date="1409745601">- re-add sysvinit support in specfile (fix build on sles11)</changelog>
<changelog author="sbrabec@suse.cz" date="1412683200">- Re-add /usr/sbin/rcsmards symlink (bnc#900099).
- Fix service restart in smartmontools.generate_smartd_opts.in
  (bnc#900099).</changelog>
<changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
<changelog author="sbrabec@suse.cz" date="1425384000">- Improve drivedb.h update scriptlets: Detect update across
  branches.
- Check state of smartmontools-drivedb.h in %prep.
- Add ghost records for files created by update-smart-drivedb.
- Improve smartmontools-drivedb_h-update.sh script: Perform spec
  file changess.
- Clean up on uninstall.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_3_DRIVEDB.</changelog>
<changelog author="sbrabec@suse.cz" date="1425902400">- Package empty /etc/smartd_warning.d for warning plugins.
- smartmontools-drivedb_h-update.sh: Fix default branch name.
- Comment fixes.</changelog>
<changelog author="sbrabec@suse.cz" date="1425988800">- Run Self Tests:
  * Short Self Test every night
  * Extended Self Test every month
  * Discussion:
    http://lists.opensuse.org/opensuse-factory/2015-03/msg00040.html
- Dropped smartmontools-removable.patch
- Created smartmontools-suse-default.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1452427200">- Update to version 6.0.4
  * Device type '  *d usbprolific' for Prolific PL2571/277x USB bridges.
  * SAT: Support for ATA registers returned in fixed format sense data.
  * smartctl '  *i' and '  *  *identify': ATA ACS  *4 and SATA 3.2 enhancements.
  * smartctl '  *l xerror': Support for logs with more than 255 pages.
  * smartctl '  *l devstat': Prints ACS  *3 DSN flags.
  * smartctl '  *l devstat': Read via SMART command if GP log is not
    available.
  * smartctl '  *l scttempsts': Prints SCT SMART STATUS (ACS  *4) and
    vendor specific SCT bytes.
  * configure option '  *  *with  *systemdenvfile=auto' as new default.
  * configure options '  *  *disable  *drivedb', '  *  *enable  *savestates'
    and '  *  *enable  *attributelog' are deprecated.
  * Corresponding '  *  *with  **' options are enhanced accordingly.
  * Configure option '  *  *with  *docdir' is deprecated.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are deprecated.
    (all of the above still work but a warning is printed if used)
  * HDD, SSD and USB additions to drive database.
  * Linux: AACRAID fixes, SMART STATUS should work now.
  * Linux: '/dev/megaraid_sas_ioctl_node' fd leak fix.
  * Darwin: '  *S' command implemented, '  *l devstat' should work now.
  * Cygwin: Compile fix.
  * Windows: Device type '  *d aacraid' for AACRAID controllers.
  * Windows: SAT autodetection based on IOCTL_STORAGE_QUERY_PROPERTY.
  * Windows installer: Fix possible loss of user PATH environment variable.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_4_DRIVEDB.
- Cleanup and remove conditional macros; the package doesn't build
  for SLE anyway
- Remove smartmontools-default-enabled.patch; not needed anymore</changelog>
<changelog author="meissner@suse.com" date="1452772800">- replaced keyring with 2015/2016 key.
  pub   rsa2048/0xDF0F1A49C4A4903A 2014-12-31 [verfällt: 2016-12-31]
  Schl.-Fingerabdruck = F41F 01FC 0784 4958 4FFC  CF57 DF0F 1A49 C4A4 903A
  uid                [  unbekannt] Smartmontools Signing Key (through 2016) &lt;smartmontools-support@lists.sourceforge.net&gt;</changelog>
<changelog author="aginies@suse.com" date="1481112000">- update to 6.5 version
  * Experimental support for NVMe devices on FreeBSD, Linux and Windows.
  * smartctl '-i', '-c', '-H' and '-l error': NVMe support.
  * smartctl '-l nvmelog': New option for NVMe.
  * smartd.conf '-H', '-l error' and '-W': NVMe support.
  * Optional NVMe device scanning support on Linux and Windows.
  * configure option '--with-nvme-devicescan' to include NVMe in
  * default device scanning result.
  * Device scanning now allows to specify multiple '-d TYPE' options.
  * ATA: Added new POWER MODE values introduced in ATA ACS-2.
  * ATA: SCT commands are no longer issued if ATA Security is locked.
  * SCSI: LB provisioning improvements.
  * SCSI: Fixed GLTSD bit set/cleared info messages.
  * SCSI: Solid State media log page is no longer checked for tapes.
  * SCSI: Improved handling when no tape cartridge in drive.
  * SCSI: Workaround for buggy Seagate firmware.
  * SAT: Improved heuristics to detect bogus sense data from SAT layer.
  * smartd: Fixed crash on missing argument to '-s' directive.
    update-smart-drivedb: Now uses HTTPS for download by default.
  * update-smart-drivedb: New options to select URL and download tool.
  * update-smart-drivedb: New download tool 'svn'.
  * configure option '--without-update-smart-drivedb' to disable
    update-smart-drivedb script.
  * configure options '--disable-drivedb', '--enable-savestates',
    '--enable-attributelog' and '--with-docdir' are no longer supported.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are no longer supported.
  * Drive database file now also includes the DEFAULT setting
    for each attribute.
  * HDD, SSD and USB additions to drive database.
  * Darwin: New support files for package installer.
  * New makefile target 'install-darwin' builds DMG image.
  * Solaris: Auto detection of SATA devices behind SAT layer.
  * Solaris SPARC: Legacy ATA support disabled by default.
    New configure option '--with-solaris-sparc-ata' enables it.
    File os_solaris_ata.s is no longer included in source tarball.
  * Windows: Auto detection of USB devices specified by drive letter.
  * Windows: Device scanning does no longer ignore unknown USB devices.
  * Windows: Prevent drive spin up by '-n standby' check.
  * Windows: New application manifests indicating Win 10 support.
  * Windows smartd: '-m [sys]msgbox' is no longer supported.
  * Windows installer: Defaults to 64-bit version on 64-bit Windows.
  * Various code changes suggested by Clang Static Analyser and Cppcheck.
- enable "--with-nvme-devicescan" option
- update smartmontools-drivedb.h file
- use --with-savestates, --with-attributelog, --docdir instead of old options</changelog>
<changelog author="sbrabec@suse.com" date="1482148800">- Drop systemd dependency on syslog.target (bsc#983938,
  smartmontools-systemd-no-syslog.patch).
  https://lists.opensuse.org/opensuse-packaging/2013-05/msg00102.html</changelog>

</package>
<package pkgid="ca5b665a427c2e1f9451ffcec076878251b8abeb0d0b03eca61e279aef297f84" name="smartmontools" arch="x86_64">
    <version epoch="0" ver="6.5" rel="8.1"/>

<changelog author="sbrabec@suse.cz" date="1353412800">- Re-introduce smartmontools-sysconfig.patch with
  SMARTD_SAVESTATES, SMARTD_ATTRLOG and SMARTD_EXTRA_OPTS sysconfig
  variables (bnc#790044).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1355313600">- Use sysconfig variables (sed on smartd.service.in) and generate
  smartd_opts for systemd smartd.service.
- Remove obsolete parsing of /etc/default/smartmontools
  (it is no more in upstream installation).</changelog>
<changelog author="sbrabec@suse.cz" date="1363608000">- Update to version 6.1:
  * smartctl -l improved.
  * smartctl -s/-g wcache and rcache for SCSI devices.
  * smartctl prints more info for ATA and SCSI devices.
  * smartctl '--identify' updated for latest ATA ACS-3 spec.
  * smartd runs /etc/smartd_warning.sh to generate warning emails.
  * smartd '-w PATH' option to specify this executable.
  * smartd '-d ignore' directive.
  * smartd DEVICESCAN ignores devices already specified.
  * smartd: added support for -s and -A for SCSI devices.
  * smartd '-W' directive uses ATA attribute 190 if 194 is missing.
  * Support of larger SCSI defect lists via READ DEFECT(12).
  * Device type '-d usbjmicron,p' for Prolific USB bridges.
  * Many HDD, SSD and USB additions to drive database.
  * Support for SAS disks behind Areca controllers.
  * Improved support for SATA disks on LSI/Megaraid controllers.
  * Disks on MegaRaid controllers are automatically scanned.
- smartmontools.keyring: New signing key for the next 2 years.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365076800">- remove all sysvinit support.</changelog>
<changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="sbrabec@suse.cz" date="1375099200">- Update to version 6.2:
  * smartctl: Added ATA write cache reordering control using
    '-g wcreorder' and '-s wcreorder,[on|off]' options.
  * update-smart-drivedb: Updated for new SVN repository.
  * HDD, SSD and USB additions to drive database.
  * Areca RAID support: Fixed possible segfault on empty port.
  * HPT RAID support: Maximum disk number increased to 128.</changelog>
<changelog author="sbrabec@suse.com" date="1386244800">- Add supplementary drivedb.h update script
  (smartmontools-drivedb_h-update.sh, bnc#851276).
- Skip drivedb.h verification by rpm -V (bnc#851276).
- Implement intelligent drivedb.h update not overwriting newer
  drivedb.h releases.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch trunk.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.</changelog>
<changelog author="ro@suse.de" date="1409745600">- update to version 6.3
  - smartctl: Fixed bogus error messages from '-g/-s wcreorder'.
  - smartctl prints ATA form factor.
  - SCSI: Improved support of modern disks (SAS SSDs).
  - SCSI: Fixed sense data noise from old disks.
  - update-smart-drivedb man page.
  - configure option '--with-smartdscriptdir'.
  - configure option '--with-smartdplugindir'.
  - configure option '--with-systemdenvfile'.
  - configure option '--with-working-snprintf'.
  - Removed build time stamps to support reproducible builds.
  - Compile fixes for C++11.
  - HDD, SSD and USB additions to drive database.
  - Linux: Support for controllers behind AACRAID driver.
  - Linux: Fixed DEVICESCAN max path count.
  - FreeBSD: Fixed possible crash caused by wrong SCSI error handling.
  - FreeBSD: Compile fix for kFreeBSD.
  - Windows: Reworked CSMI port scanning.
  - QNX: Compile fix.
- dropped patches:
  smartmontools-nobuild-date.patch (code removed upstream)</changelog>
<changelog author="ro@suse.de" date="1409745601">- re-add sysvinit support in specfile (fix build on sles11)</changelog>
<changelog author="sbrabec@suse.cz" date="1412683200">- Re-add /usr/sbin/rcsmards symlink (bnc#900099).
- Fix service restart in smartmontools.generate_smartd_opts.in
  (bnc#900099).</changelog>
<changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
<changelog author="sbrabec@suse.cz" date="1425384000">- Improve drivedb.h update scriptlets: Detect update across
  branches.
- Check state of smartmontools-drivedb.h in %prep.
- Add ghost records for files created by update-smart-drivedb.
- Improve smartmontools-drivedb_h-update.sh script: Perform spec
  file changess.
- Clean up on uninstall.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_3_DRIVEDB.</changelog>
<changelog author="sbrabec@suse.cz" date="1425902400">- Package empty /etc/smartd_warning.d for warning plugins.
- smartmontools-drivedb_h-update.sh: Fix default branch name.
- Comment fixes.</changelog>
<changelog author="sbrabec@suse.cz" date="1425988800">- Run Self Tests:
  * Short Self Test every night
  * Extended Self Test every month
  * Discussion:
    http://lists.opensuse.org/opensuse-factory/2015-03/msg00040.html
- Dropped smartmontools-removable.patch
- Created smartmontools-suse-default.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1452427200">- Update to version 6.0.4
  * Device type '  *d usbprolific' for Prolific PL2571/277x USB bridges.
  * SAT: Support for ATA registers returned in fixed format sense data.
  * smartctl '  *i' and '  *  *identify': ATA ACS  *4 and SATA 3.2 enhancements.
  * smartctl '  *l xerror': Support for logs with more than 255 pages.
  * smartctl '  *l devstat': Prints ACS  *3 DSN flags.
  * smartctl '  *l devstat': Read via SMART command if GP log is not
    available.
  * smartctl '  *l scttempsts': Prints SCT SMART STATUS (ACS  *4) and
    vendor specific SCT bytes.
  * configure option '  *  *with  *systemdenvfile=auto' as new default.
  * configure options '  *  *disable  *drivedb', '  *  *enable  *savestates'
    and '  *  *enable  *attributelog' are deprecated.
  * Corresponding '  *  *with  **' options are enhanced accordingly.
  * Configure option '  *  *with  *docdir' is deprecated.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are deprecated.
    (all of the above still work but a warning is printed if used)
  * HDD, SSD and USB additions to drive database.
  * Linux: AACRAID fixes, SMART STATUS should work now.
  * Linux: '/dev/megaraid_sas_ioctl_node' fd leak fix.
  * Darwin: '  *S' command implemented, '  *l devstat' should work now.
  * Cygwin: Compile fix.
  * Windows: Device type '  *d aacraid' for AACRAID controllers.
  * Windows: SAT autodetection based on IOCTL_STORAGE_QUERY_PROPERTY.
  * Windows installer: Fix possible loss of user PATH environment variable.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_4_DRIVEDB.
- Cleanup and remove conditional macros; the package doesn't build
  for SLE anyway
- Remove smartmontools-default-enabled.patch; not needed anymore</changelog>
<changelog author="meissner@suse.com" date="1452772800">- replaced keyring with 2015/2016 key.
  pub   rsa2048/0xDF0F1A49C4A4903A 2014-12-31 [verfällt: 2016-12-31]
  Schl.-Fingerabdruck = F41F 01FC 0784 4958 4FFC  CF57 DF0F 1A49 C4A4 903A
  uid                [  unbekannt] Smartmontools Signing Key (through 2016) &lt;smartmontools-support@lists.sourceforge.net&gt;</changelog>
<changelog author="aginies@suse.com" date="1481112000">- update to 6.5 version
  * Experimental support for NVMe devices on FreeBSD, Linux and Windows.
  * smartctl '-i', '-c', '-H' and '-l error': NVMe support.
  * smartctl '-l nvmelog': New option for NVMe.
  * smartd.conf '-H', '-l error' and '-W': NVMe support.
  * Optional NVMe device scanning support on Linux and Windows.
  * configure option '--with-nvme-devicescan' to include NVMe in
  * default device scanning result.
  * Device scanning now allows to specify multiple '-d TYPE' options.
  * ATA: Added new POWER MODE values introduced in ATA ACS-2.
  * ATA: SCT commands are no longer issued if ATA Security is locked.
  * SCSI: LB provisioning improvements.
  * SCSI: Fixed GLTSD bit set/cleared info messages.
  * SCSI: Solid State media log page is no longer checked for tapes.
  * SCSI: Improved handling when no tape cartridge in drive.
  * SCSI: Workaround for buggy Seagate firmware.
  * SAT: Improved heuristics to detect bogus sense data from SAT layer.
  * smartd: Fixed crash on missing argument to '-s' directive.
    update-smart-drivedb: Now uses HTTPS for download by default.
  * update-smart-drivedb: New options to select URL and download tool.
  * update-smart-drivedb: New download tool 'svn'.
  * configure option '--without-update-smart-drivedb' to disable
    update-smart-drivedb script.
  * configure options '--disable-drivedb', '--enable-savestates',
    '--enable-attributelog' and '--with-docdir' are no longer supported.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are no longer supported.
  * Drive database file now also includes the DEFAULT setting
    for each attribute.
  * HDD, SSD and USB additions to drive database.
  * Darwin: New support files for package installer.
  * New makefile target 'install-darwin' builds DMG image.
  * Solaris: Auto detection of SATA devices behind SAT layer.
  * Solaris SPARC: Legacy ATA support disabled by default.
    New configure option '--with-solaris-sparc-ata' enables it.
    File os_solaris_ata.s is no longer included in source tarball.
  * Windows: Auto detection of USB devices specified by drive letter.
  * Windows: Device scanning does no longer ignore unknown USB devices.
  * Windows: Prevent drive spin up by '-n standby' check.
  * Windows: New application manifests indicating Win 10 support.
  * Windows smartd: '-m [sys]msgbox' is no longer supported.
  * Windows installer: Defaults to 64-bit version on 64-bit Windows.
  * Various code changes suggested by Clang Static Analyser and Cppcheck.
- enable "--with-nvme-devicescan" option
- update smartmontools-drivedb.h file
- use --with-savestates, --with-attributelog, --docdir instead of old options</changelog>
<changelog author="sbrabec@suse.com" date="1482148800">- Drop systemd dependency on syslog.target (bsc#983938,
  smartmontools-systemd-no-syslog.patch).
  https://lists.opensuse.org/opensuse-packaging/2013-05/msg00102.html</changelog>

</package>
<package pkgid="f3079855f9afbc2661ecf4e4b26f14b9798821e5f539b88f34f8ad728fd4faa5" name="squidGuard" arch="src">
    <version epoch="0" ver="1.4" rel="8.1"/>

<changelog author="kssingvo@suse.de" date="1056542400">- fixed db-&gt;open() call, like Thorsten suggested</changelog>
<changelog author="ro@suse.de" date="1083153600">- added -fno-strict-aliasing</changelog>
<changelog author="dmueller@suse.de" date="1131451200">- don't build as root</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add bison and flex BuildRequires</changelog>
<changelog author="kssingvo@suse.de" date="1178798400">- upgrade to version 1.2.1:
  * Fixed multiple slash bypass vulnerabilty.
  * Fixed some bugs in squidGuard-simple.cgi and added a
    German version of it.
  * Fixed encoding bypass vulnerabilty.
  * Updated y.tab.c.bison and y.tab.h.bison to the recent version.
  * Fixed bug in user authentication.
  * Fixed some typos which broke compilation on Sun Solaris
    when using the Sun CC compiler.
  * Corrected unproper evaluated if-clause, which broke the
    BerkeleyDB 2 compatibility.
  * Fixed minor typo in samples/Makefile.in.
  * Replaced the sleepycat links from the configure program with
    the oracle links.
  * Corrected typo in Makefile.in.
  * Removed a stupid bug from the Makefile in the docs directory.
  * Removed references to squidguard.org in Makefile.in in the
    Doc directory (squidguard.org is down).
  * Added ISSUES.txt file about known problem with the current
    code (any information that is missing and should go in there
    is gladly welcomed).
  * Release now supports LDAP queries for authentication:
  * Added Chris Frey's ldap patches and fixes (03, 05, 06,
    07 and 10; Patches from:
    http://www.netdirect.ca/software/category.php?cat=SquidGuard).
  * The LDAP feature can be included during the configure run
    by setting --with-ldap.
  * Added a fix provided by Francesco Ranieri to solve an issue
    with the (un)escaping of the authentication "domain%5cusername".
- adapted configuration related patches</changelog>
<changelog author="kssingvo@suse.de" date="1183550400">- fixes from upstream:
  * double slash bug fix extracted from Patch-20070513 tarball
  * regexp bug fix extracted from Patch-20070520 tarball
  * compiler bug fix extracted from Patch-20070520 tarball</changelog>
<changelog author="kssingvo@suse.de" date="1196337600">- update to version 1.3:
  * Included configurable logging. New configure option --nolog
    suppress all runtime logmessages. Start and stop is still
    logged. Default behaviour is now to log the non debug
    messages except when the runtime option -d is supplied to
    squidGuard. May need some more finetuning in later versions.
    (bug 11) Made some slight changes to the outdated FAQ file.
  * Modified auth code to work with and without ldap (choosing
    subroutine rfc1738_unescape or sgFindUser in sg.y.in)
  * Corrected include statement in sg.h.in.
  * Added patch by Marc Clayton to include a progressbar to the
    build of the database files (bug 6).
  * Added patch by Eric Harrison to enable full sed compliance to
    rewrite statements (bug 7).
  * Corrected missing evaluation of configure parameters for
    logdir, dbhome and config file (bug 11).
  * Added patch from satish to block urls entries that include
    hostnames (bug 4).
  * Fixed broken regex evaluation (bug 12)
  * Fixed a compile problem on some systems (bug 10).
  * Corrected an issue with the fix for the double slash
    vulnerability (incorrectly found double slashes) (bug 1).
- fixed build/config issues</changelog>
<changelog author="kssingvo@suse.de" date="1215000000">- added latest upstream patch (20080613) as trailing_dot.patch
- "Requires: http_proxy"  now, as squid3 is an alternative</changelog>
<changelog author="kssingvo@suse.de" date="1216728000">- added latest upstream patch (20080714) as two individual patches:
  * fix for squid complaining about progress bar
  * fix if URL was requested which ends with "://"</changelog>
<changelog author="lrupp@suse.de" date="1253966400">- update to 1.4:
  + some fixes
  + Added MySQL support for authentication. The database is
    assumed to be configured on localhost.
  + Fixed configure.in to comply with the autoconf standard
  + Fixed broken "make test"
  + Added new runtime parameter "-P". This parameter changes
    the default behaviour from stop (emergency mode) to pass
    when an error in building the database files occurs. So
    this parameter only works in connection with the runtime
    paramter "-C". Before using "-P" in your environment
    make sure that nothing breakes when the building of the
    db files fail.
  + Added Spanish translation to squidGuard.cgi
- enabled --nolog option
- enabled mysql auth
- removed squidGuard-1.3-bl_less_noise.patch (upstream)
- adapted squidGuard-1.3-config.patch
- split up doc package
- package the cgi scripts (and babel files) in /srv/www/cgi-bin
- package blocked.gif in /srv/www/htdocs/images
- added squidGuard.logrotate script</changelog>
<changelog author="chris@computersalat.de" date="1255089600">- fixed lost mods from kssingvo 20070702
  o "Requires: http_proxy"  now, as squid3 is an alternative
- spec
  o sorted TAGS
- rpmlint
  o non-utf8-spec-file</changelog>
<changelog author="chris@computersalat.de" date="1255176000">- fix deps
  o PreReq: http_proxy
  o osc meta -e prjconf Prefer: squid3</changelog>
<changelog author="chris@computersalat.de" date="1255521600">- fixed deps for SLES_9
  o Unknown tag: Recommends:</changelog>
<changelog author="ro@suse.de" date="1279108800">- add "missingok" to logrotate configuration
  (no logfile if never used causing error from cron when
  running logrotate)</changelog>
<changelog author="puzel@novell.com" date="1280404800">- add squidGuard-CVE-2009-3700.patch,
  squidGuard-CVE-2009-3826.patch (bnc#550930)</changelog>
<changelog author="puzel@novell.com" date="1287057600">- fix squidGuard-CVE-2009-3826.patch patch</changelog>
<changelog author="pgajdos@suse.com" date="1411560000">- SuSE -&gt; SUSE [bnc#889003]</changelog>
<changelog author="adam.majer@suse.de" date="1466424000">- add xss_fix_02_2015.patch:
  o fix XSS possibility in blocked error page by escaping all
    &lt; and &gt; in the printed url (CVE-2015-8936, bnc#985612)
- fix URL in README so it doesn't point at non-existent page</changelog>
<changelog author="adam.majer@suse.de" date="1498737600">- squidGuard-1.4_upgrade.patch: adapts squidGuard to function with
  current squid versions (bnc#1040757)
- reference only existing filter lists in default installed config
  (bnc#961499)</changelog>

</package>
<package pkgid="8b3cf530018f7ab8540b2b276ff4bdbfe1e966ff5c863f8355f8ad060aef9300" name="squidGuard" arch="x86_64">
    <version epoch="0" ver="1.4" rel="8.1"/>

<changelog author="lrupp@suse.de" date="1253966400">- update to 1.4:
  + some fixes
  + Added MySQL support for authentication. The database is
    assumed to be configured on localhost.
  + Fixed configure.in to comply with the autoconf standard
  + Fixed broken "make test"
  + Added new runtime parameter "-P". This parameter changes
    the default behaviour from stop (emergency mode) to pass
    when an error in building the database files occurs. So
    this parameter only works in connection with the runtime
    paramter "-C". Before using "-P" in your environment
    make sure that nothing breakes when the building of the
    db files fail.
  + Added Spanish translation to squidGuard.cgi
- enabled --nolog option
- enabled mysql auth
- removed squidGuard-1.3-bl_less_noise.patch (upstream)
- adapted squidGuard-1.3-config.patch
- split up doc package
- package the cgi scripts (and babel files) in /srv/www/cgi-bin
- package blocked.gif in /srv/www/htdocs/images
- added squidGuard.logrotate script</changelog>
<changelog author="chris@computersalat.de" date="1255089600">- fixed lost mods from kssingvo 20070702
  o "Requires: http_proxy"  now, as squid3 is an alternative
- spec
  o sorted TAGS
- rpmlint
  o non-utf8-spec-file</changelog>
<changelog author="chris@computersalat.de" date="1255176000">- fix deps
  o PreReq: http_proxy
  o osc meta -e prjconf Prefer: squid3</changelog>
<changelog author="chris@computersalat.de" date="1255521600">- fixed deps for SLES_9
  o Unknown tag: Recommends:</changelog>
<changelog author="ro@suse.de" date="1279108800">- add "missingok" to logrotate configuration
  (no logfile if never used causing error from cron when
  running logrotate)</changelog>
<changelog author="puzel@novell.com" date="1280404800">- add squidGuard-CVE-2009-3700.patch,
  squidGuard-CVE-2009-3826.patch (bnc#550930)</changelog>
<changelog author="puzel@novell.com" date="1287057600">- fix squidGuard-CVE-2009-3826.patch patch</changelog>
<changelog author="pgajdos@suse.com" date="1411560000">- SuSE -&gt; SUSE [bnc#889003]</changelog>
<changelog author="adam.majer@suse.de" date="1466424000">- add xss_fix_02_2015.patch:
  o fix XSS possibility in blocked error page by escaping all
    &lt; and &gt; in the printed url (CVE-2015-8936, bnc#985612)
- fix URL in README so it doesn't point at non-existent page</changelog>
<changelog author="adam.majer@suse.de" date="1498737600">- squidGuard-1.4_upgrade.patch: adapts squidGuard to function with
  current squid versions (bnc#1040757)
- reference only existing filter lists in default installed config
  (bnc#961499)</changelog>

</package>
<package pkgid="1382023c8ef8cc96b10ab8c2a239a8406bd7218befe23affb7c866dadc737213" name="squidGuard-doc" arch="x86_64">
    <version epoch="0" ver="1.4" rel="8.1"/>

<changelog author="lrupp@suse.de" date="1253966400">- update to 1.4:
  + some fixes
  + Added MySQL support for authentication. The database is
    assumed to be configured on localhost.
  + Fixed configure.in to comply with the autoconf standard
  + Fixed broken "make test"
  + Added new runtime parameter "-P". This parameter changes
    the default behaviour from stop (emergency mode) to pass
    when an error in building the database files occurs. So
    this parameter only works in connection with the runtime
    paramter "-C". Before using "-P" in your environment
    make sure that nothing breakes when the building of the
    db files fail.
  + Added Spanish translation to squidGuard.cgi
- enabled --nolog option
- enabled mysql auth
- removed squidGuard-1.3-bl_less_noise.patch (upstream)
- adapted squidGuard-1.3-config.patch
- split up doc package
- package the cgi scripts (and babel files) in /srv/www/cgi-bin
- package blocked.gif in /srv/www/htdocs/images
- added squidGuard.logrotate script</changelog>
<changelog author="chris@computersalat.de" date="1255089600">- fixed lost mods from kssingvo 20070702
  o "Requires: http_proxy"  now, as squid3 is an alternative
- spec
  o sorted TAGS
- rpmlint
  o non-utf8-spec-file</changelog>
<changelog author="chris@computersalat.de" date="1255176000">- fix deps
  o PreReq: http_proxy
  o osc meta -e prjconf Prefer: squid3</changelog>
<changelog author="chris@computersalat.de" date="1255521600">- fixed deps for SLES_9
  o Unknown tag: Recommends:</changelog>
<changelog author="ro@suse.de" date="1279108800">- add "missingok" to logrotate configuration
  (no logfile if never used causing error from cron when
  running logrotate)</changelog>
<changelog author="puzel@novell.com" date="1280404800">- add squidGuard-CVE-2009-3700.patch,
  squidGuard-CVE-2009-3826.patch (bnc#550930)</changelog>
<changelog author="puzel@novell.com" date="1287057600">- fix squidGuard-CVE-2009-3826.patch patch</changelog>
<changelog author="pgajdos@suse.com" date="1411560000">- SuSE -&gt; SUSE [bnc#889003]</changelog>
<changelog author="adam.majer@suse.de" date="1466424000">- add xss_fix_02_2015.patch:
  o fix XSS possibility in blocked error page by escaping all
    &lt; and &gt; in the printed url (CVE-2015-8936, bnc#985612)
- fix URL in README so it doesn't point at non-existent page</changelog>
<changelog author="adam.majer@suse.de" date="1498737600">- squidGuard-1.4_upgrade.patch: adapts squidGuard to function with
  current squid versions (bnc#1040757)
- reference only existing filter lists in default installed config
  (bnc#961499)</changelog>

</package>
<package pkgid="06288cc61fe5a0f842ad66cec328360e3b00f0294ab3d4c59520deaaee994122" name="systemd" arch="src">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="5a3440e9aae9d7ec0d68553d6e47410880e63ae274bce607c6d17e1d4bfaed58" name="systemd" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="2fdbc93b2e6cb94907872a38234c854e8960b557e0da60af155a803505a4d658" name="systemd-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="9f5b2a373cde5925bcbfd2ce15890d2cdb7bcc2f8d47a645268784b18772a36e" name="systemd-bash-completion" arch="noarch">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="c1a687b47b43e4be838d9cc697c18e7c4666addb00868615b3e6b8e4c9c70b94" name="systemd-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="0e14c8c94a310733ea58fa84b3f4cc01e50bc3d36ee9e1c4db48185df309e35b" name="systemd-logger" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="6208432b39743c1a4fdbe4fba641bc885dd4ac279930480e92e91481fbc3088b" name="systemd-mini" arch="src">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="2f59e1a1694c5736f5aa5e6339edfeb8cb0b16d78c562fceb34ea99674629ba2" name="systemd-mini" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="de9d3bbc2f08f4c4446cc47c4fe3abd6ec5093c944bd664490dd6228e4921459" name="systemd-mini-bash-completion" arch="noarch">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="be13fdd0e90108663abf487efe42031e8c3c36bac4743547e0f187cbc07ebde7" name="systemd-mini-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="3d88c6616f4a84a552dc6194fac0fd9c2cd3bdf046b3f5d971b324211cccb01e" name="systemd-mini-sysvinit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="c2423b223abc42539e37fafb4fc13e0eaa3ec14c975d9f4829344ff26270a137" name="systemd-sysvinit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="dbbb18db904456476e7d027cd4009220b94b11fc2540140b705384370d0d3b3c" name="the_silver_searcher" arch="src">
    <version epoch="0" ver="2.0.0" rel="6.1"/>

<changelog author="fcastelli@suse.com" date="1366718400">- packaged version 0.14</changelog>
<changelog author="fcastelli@suse.com" date="1366718401">- fix spec file: use right group</changelog>
<changelog author="fcastelli@suse.com" date="1366718402">- Fix building on SLE.</changelog>
<changelog author="fcastelli@suse.com" date="1383566400">- Update to version 0.18:
  * Fix UTF-8 detection.
  * Add support for LZMA and XZ compressed files.
  * better parse gitignore config.
  * Various bugfixes.
- Cleaned up specfile.</changelog>
<changelog author="fcrozat@suse.com" date="1391169600">- Update to version 0.19.2:
  + Improve output
- Changes from 0.19.1:
  + Don't print two slashes at the start of a path
- Changes from 0.19.0:
- Changes from 0.18.1:
  + performance fixes
  + fix infinite loop in EOF detection
  + Handle '-i' before '-g' or '-G' properly
  + fix build without lzma
- Switch to .tar.gz as they are generated directly by github.
- Replace %{_prefix}/data by %{_datadir} in specfile.</changelog>
<changelog author="multyrealm@gmail.com" date="1421064000">- Update to version 0.28.0</changelog>
<changelog author="astieger@suse.com" date="1431691200">- update to version 0.30.0:
  * --one-device option
  * language types and filter updates
  * performance improvements
  * bug fixes
- use bootstrapped upstream release tarballs, do not re-bootstrap
- add source signature and signing key
- update bash completion location</changelog>
<changelog author="fcrozat@suse.com" date="1442664000">- Update to version 0.31.0:
  * Improve bash completion.
  * Add support for Elixir, Mako, Racket and Standard ML file types.
  * various bugfixes.</changelog>
<changelog author="idonmez@suse.com" date="1463572800">- Update to version 0.32.0
  * Add support for Fish, Chapel, Factor, Kotlin, Julia, TypeScript,
    RDoc, Velocity, RestructuredText, TOML, BitBake, Bro file types.
  * Various bugfixes.</changelog>
<changelog author="astieger@suse.com" date="1475150400">- update to 0.33.0:
  * Fix --word-regexp not applying to alternates
  * The preferred ignore file is .ignore, .agignore is deprecated</changelog>
<changelog author="astieger@suse.com" date="1480334400">- update to 1.0.1:
  * faster substring search
  * fix context line printing when reading from a pipe
  * ignore local-domain socket just like named pipes
  * updates of common file extensions
  * add zsh completion function</changelog>
<changelog author="astieger@suse.com" date="1480939200">- update to 1.0.2:
  * updated for platforms other than Linux</changelog>
<changelog author="astieger@suse.com" date="1495627200">- update to 1.0.3:
  * add log, elm, twig file types
  * *.js now ignores *.min.js, add .es6 to js file type</changelog>
<changelog author="astieger@suse.com" date="1500897600">- update to 2.0.0:
  * Added file types: Haxe (hx), JSP tag and fragment files
  * No longer read from .agignore, .ignore is the canonical file
  * Add --print-all-files options to print all files searched
  * Add support for inverting ignore rules (e.g. !blah.txt)
  * Fix heap buffer overflow when searching an absolute path
    bsc#1050057
  * documentation updates</changelog>

</package>
<package pkgid="e87a74c589b3c95aa2e11814602d9eeab3bd60dc0a77556dc01576926feb9d1b" name="the_silver_searcher" arch="x86_64">
    <version epoch="0" ver="2.0.0" rel="6.1"/>

<changelog author="fcastelli@suse.com" date="1366718400">- packaged version 0.14</changelog>
<changelog author="fcastelli@suse.com" date="1366718401">- fix spec file: use right group</changelog>
<changelog author="fcastelli@suse.com" date="1366718402">- Fix building on SLE.</changelog>
<changelog author="fcastelli@suse.com" date="1383566400">- Update to version 0.18:
  * Fix UTF-8 detection.
  * Add support for LZMA and XZ compressed files.
  * better parse gitignore config.
  * Various bugfixes.
- Cleaned up specfile.</changelog>
<changelog author="fcrozat@suse.com" date="1391169600">- Update to version 0.19.2:
  + Improve output
- Changes from 0.19.1:
  + Don't print two slashes at the start of a path
- Changes from 0.19.0:
- Changes from 0.18.1:
  + performance fixes
  + fix infinite loop in EOF detection
  + Handle '-i' before '-g' or '-G' properly
  + fix build without lzma
- Switch to .tar.gz as they are generated directly by github.
- Replace %{_prefix}/data by %{_datadir} in specfile.</changelog>
<changelog author="multyrealm@gmail.com" date="1421064000">- Update to version 0.28.0</changelog>
<changelog author="astieger@suse.com" date="1431691200">- update to version 0.30.0:
  * --one-device option
  * language types and filter updates
  * performance improvements
  * bug fixes
- use bootstrapped upstream release tarballs, do not re-bootstrap
- add source signature and signing key
- update bash completion location</changelog>
<changelog author="fcrozat@suse.com" date="1442664000">- Update to version 0.31.0:
  * Improve bash completion.
  * Add support for Elixir, Mako, Racket and Standard ML file types.
  * various bugfixes.</changelog>
<changelog author="idonmez@suse.com" date="1463572800">- Update to version 0.32.0
  * Add support for Fish, Chapel, Factor, Kotlin, Julia, TypeScript,
    RDoc, Velocity, RestructuredText, TOML, BitBake, Bro file types.
  * Various bugfixes.</changelog>
<changelog author="astieger@suse.com" date="1475150400">- update to 0.33.0:
  * Fix --word-regexp not applying to alternates
  * The preferred ignore file is .ignore, .agignore is deprecated</changelog>
<changelog author="astieger@suse.com" date="1480334400">- update to 1.0.1:
  * faster substring search
  * fix context line printing when reading from a pipe
  * ignore local-domain socket just like named pipes
  * updates of common file extensions
  * add zsh completion function</changelog>
<changelog author="astieger@suse.com" date="1480939200">- update to 1.0.2:
  * updated for platforms other than Linux</changelog>
<changelog author="astieger@suse.com" date="1495627200">- update to 1.0.3:
  * add log, elm, twig file types
  * *.js now ignores *.min.js, add .es6 to js file type</changelog>
<changelog author="astieger@suse.com" date="1500897600">- update to 2.0.0:
  * Added file types: Haxe (hx), JSP tag and fragment files
  * No longer read from .agignore, .ignore is the canonical file
  * Add --print-all-files options to print all files searched
  * Add support for inverting ignore rules (e.g. !blah.txt)
  * Fix heap buffer overflow when searching an absolute path
    bsc#1050057
  * documentation updates</changelog>

</package>
<package pkgid="812b76358966697ad70bfea1e52da25c82973428abaafb4c762cefe5678f4a3c" name="ucode-intel" arch="src">
    <version epoch="0" ver="20170707" rel="10.1"/>

<changelog author="trenn@suse.de" date="1385985600">- Add mkinitrd script to add Intel microcode to initrd.
  This is needed because microcode driver is built in or gets loaded
  automatically via udev early. Therefore the microcode has to be available
  in initrd already.
  This must not be mixed up with early micorcode loading. This feature will
  not be implemented via mkinitrd. Dracut is doing early microcode loading.
- bnc#847158
- mkinitrd scripts:
  - mkinitrd_setup-intel_microcode.sh
    Adding microcode to the initrd
  - mkinitrd_boot-intel_microcode.sh
    Triggering the reload at boot</changelog>
<changelog author="trenn@suse.de" date="1386676800">- Loading firmware needs udev to be running</changelog>
<changelog author="idonmez@suse.com" date="1392120000">- ucode 20140122, no changelog available.</changelog>
<changelog author="mmarek@suse.cz" date="1396612800">- Regenerate the initrd in %posttrans (fate#313506)</changelog>
<changelog author="trenn@suse.de" date="1399291200">- Update to Intel microcode version 20140430 (bnc#876073)</changelog>
<changelog author="trenn@suse.de" date="1402660800">- Delete mkinitrd scripts. This is done via %rpm regenerate_initrd_* macros
  (bnc#894160)</changelog>
<changelog author="tiwai@suse.de" date="1404302400">- Update to Intel microcode version 20140624 (bnc#885213)</changelog>
<changelog author="trenn@suse.de" date="1410955200">- Update to Intel microcode version 20140624 (bnc#896736, fate#317896)
  This microcode disables lock elision on CPUs which are known to
  not work reliable with this feature</changelog>
<changelog author="trenn@suse.de" date="1411128000">- Do not try to reload/update microcode at runtime after package
  installation. Only supported way of updating microcode is via
  early microcode update via initrd. bnc#896736</changelog>
<changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
<changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
<changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
<changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
<changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
<changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
<changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
<changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>

</package>
<package pkgid="d709645da0a5453cbd1471aa812406b26aafa50e7652b7e6b1953a48dfb764ab" name="ucode-intel" arch="x86_64">
    <version epoch="0" ver="20170707" rel="10.1"/>

<changelog author="trenn@suse.de" date="1385985600">- Add mkinitrd script to add Intel microcode to initrd.
  This is needed because microcode driver is built in or gets loaded
  automatically via udev early. Therefore the microcode has to be available
  in initrd already.
  This must not be mixed up with early micorcode loading. This feature will
  not be implemented via mkinitrd. Dracut is doing early microcode loading.
- bnc#847158
- mkinitrd scripts:
  - mkinitrd_setup-intel_microcode.sh
    Adding microcode to the initrd
  - mkinitrd_boot-intel_microcode.sh
    Triggering the reload at boot</changelog>
<changelog author="trenn@suse.de" date="1386676800">- Loading firmware needs udev to be running</changelog>
<changelog author="idonmez@suse.com" date="1392120000">- ucode 20140122, no changelog available.</changelog>
<changelog author="mmarek@suse.cz" date="1396612800">- Regenerate the initrd in %posttrans (fate#313506)</changelog>
<changelog author="trenn@suse.de" date="1399291200">- Update to Intel microcode version 20140430 (bnc#876073)</changelog>
<changelog author="trenn@suse.de" date="1402660800">- Delete mkinitrd scripts. This is done via %rpm regenerate_initrd_* macros
  (bnc#894160)</changelog>
<changelog author="tiwai@suse.de" date="1404302400">- Update to Intel microcode version 20140624 (bnc#885213)</changelog>
<changelog author="trenn@suse.de" date="1410955200">- Update to Intel microcode version 20140624 (bnc#896736, fate#317896)
  This microcode disables lock elision on CPUs which are known to
  not work reliable with this feature</changelog>
<changelog author="trenn@suse.de" date="1411128000">- Do not try to reload/update microcode at runtime after package
  installation. Only supported way of updating microcode is via
  early microcode update via initrd. bnc#896736</changelog>
<changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
<changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
<changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
<changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
<changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
<changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
<changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
<changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>

</package>
<package pkgid="05a86b9dd78e8817959201d06ab438988f87218310ee9509aacaf8a89ef444b4" name="ucode-intel-blob" arch="x86_64">
    <version epoch="0" ver="20170707" rel="10.1"/>

<changelog author="trenn@suse.de" date="1385985600">- Add mkinitrd script to add Intel microcode to initrd.
  This is needed because microcode driver is built in or gets loaded
  automatically via udev early. Therefore the microcode has to be available
  in initrd already.
  This must not be mixed up with early micorcode loading. This feature will
  not be implemented via mkinitrd. Dracut is doing early microcode loading.
- bnc#847158
- mkinitrd scripts:
  - mkinitrd_setup-intel_microcode.sh
    Adding microcode to the initrd
  - mkinitrd_boot-intel_microcode.sh
    Triggering the reload at boot</changelog>
<changelog author="trenn@suse.de" date="1386676800">- Loading firmware needs udev to be running</changelog>
<changelog author="idonmez@suse.com" date="1392120000">- ucode 20140122, no changelog available.</changelog>
<changelog author="mmarek@suse.cz" date="1396612800">- Regenerate the initrd in %posttrans (fate#313506)</changelog>
<changelog author="trenn@suse.de" date="1399291200">- Update to Intel microcode version 20140430 (bnc#876073)</changelog>
<changelog author="trenn@suse.de" date="1402660800">- Delete mkinitrd scripts. This is done via %rpm regenerate_initrd_* macros
  (bnc#894160)</changelog>
<changelog author="tiwai@suse.de" date="1404302400">- Update to Intel microcode version 20140624 (bnc#885213)</changelog>
<changelog author="trenn@suse.de" date="1410955200">- Update to Intel microcode version 20140624 (bnc#896736, fate#317896)
  This microcode disables lock elision on CPUs which are known to
  not work reliable with this feature</changelog>
<changelog author="trenn@suse.de" date="1411128000">- Do not try to reload/update microcode at runtime after package
  installation. Only supported way of updating microcode is via
  early microcode update via initrd. bnc#896736</changelog>
<changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
<changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
<changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
<changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
<changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
<changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
<changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
<changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>

</package>
<package pkgid="b43dc0f91c7645733e7f5a0a8ccef3cd5ae6dcba8cd81848ca8e109dd960b38a" name="udev" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="10245b8bb073d3a4f1be6cd6b91b3ba89876e322a63b262cd87e727934d443ef" name="udev-mini" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="0b1c70cdeac4b24e715f6299832a21457ea887327921eb0c401f66d4dcf329b5" name="virtualbox" arch="src">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="57d2a606c9731be1999e693eccc7156c59d18b32cc968bc1f33be303089052bb" name="virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="17b5c70bc8da9db1b811981d2131eebcf4b134da0f43d6ec28d55eb2bba08a10" name="virtualbox-devel" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="aa7895bb986cccd8836ce6e2b5c61377affcfe5b5ee2a7a9c9bda62bc1f4dae3" name="virtualbox-guest-desktop-icons" arch="noarch">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="d8234aa396933b9f76dd676a0ceabd956bf481e9513738e9961a709d6c2f2b76" name="virtualbox-guest-kmp-default" arch="x86_64">
    <version epoch="0" ver="5.1.24_k4.4.76_1" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="e591b0548209042f548386c5fcd4ffa093cc3c3500f96e3c6a47f6aefa0db053" name="virtualbox-guest-source" arch="noarch">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="38b0e0a895cbeb239835c74130af22befbe41a32e13fc35b8bb7c8b753d5f33e" name="virtualbox-guest-tools" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="85857a6e39668c3ecdcc8ea70851b34d2441f96b06bc2f3992beb86ba25256c9" name="virtualbox-guest-x11" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="05fc98e88c71b9a2a2b0175715439f4bced342475dcbf737a9972140a197afe7" name="virtualbox-host-kmp-default" arch="x86_64">
    <version epoch="0" ver="5.1.24_k4.4.76_1" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="3fd5710e557842f021245a5d2298905aa75f410fc4799cf84dbdf088d22aa721" name="virtualbox-host-source" arch="noarch">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="29d6f593ad7ec70f7ee46786d597e05a2fa72475494c14eb510836cdcde43e6e" name="virtualbox-qt" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="7f5b628d0ac9e1ce8c1906dd062d247f0d96267293152358dea06b4e5e90b9e9" name="virtualbox-vnc" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="774329d8d6e7edae192a964aa3d90b0acac72a256fa6291a37538dfcf3733e10" name="virtualbox-websrv" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="c589244c8bf6a9295467d3401f892668df73e5eb1acd3b78933656de3bcdc555" name="wireshark" arch="src">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>
<package pkgid="36d2e122d2f98ef7880b80b7b53c46b862902e6de632e6d159287b4dc6e54097" name="wireshark" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>
<package pkgid="632cbdf8c6dca8ef6a53c5e196733d404ec0c358fbdbf16373e142dd25b9359b" name="wireshark-devel" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>
<package pkgid="0c7549f3023661f44489a122dc669387ff353d9f21e0904c7aa029e1f9585664" name="wireshark-ui-gtk" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>
<package pkgid="4517b56bfe66e91c8ed7d3515cc69ff19b66f89b26706880c772314a2292d800" name="wireshark-ui-qt" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>
<package pkgid="1022a94e054c87d46bbccbd7c6f3299471135381ef0b5b3a962d3343144ae493" name="xorg-x11-server" arch="src">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="4c10d834dc06a65fb3276e8b6e6cdf8f7b56e4e21a1ac0879d2178b7ee232f5e" name="xorg-x11-server" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="f4de5251f231d3cb3c7adee8585a8a07b81dbc40e965bf3afee42921529a3087" name="xorg-x11-server-extra" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="eb76894f0116a21347541e7fc0d99790b0c2b03634f757c7231b5326a888da65" name="xorg-x11-server-sdk" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="620240d4f10ba0e7e506a4ef0453c25bc41760180884c8e60f09e7f1ae70bed2" name="xorg-x11-server-source" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="462b5977748acf573e84eee071da3c020132d609772af9b14dd3cbed2091ab62" name="xtables-plugins" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>

<package pkgid="c17d7c45098f890598bd7c2100fa4b64c28c18e77fd3e04acf106a2b8c65d6b2" name="fate" arch="src">
    <version epoch="0" ver="1.6.0.2" rel="26.1"/>

<changelog author="joachim@suse.de" date="1450353600">- update to version 1.5.5.1
  which fixes BSC#957386
  points to bugzilla.suse.com instead of bugs.kde.or</changelog>
<changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
<changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
<changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
<changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
<changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
<changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
<changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
<changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
<changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
<changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
<changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
<changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
<changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
<changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
<changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
<changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
<changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
<changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
<changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>

</package>

<package pkgid="b350852a592724a2d7b4cff5d9c8dbe25f3aae93a3e13c2497b26a6e947a3a35" name="fate" arch="x86_64">
    <version epoch="0" ver="1.6.0.2" rel="26.1"/>

<changelog author="joachim@suse.de" date="1450353600">- update to version 1.5.5.1
  which fixes BSC#957386
  points to bugzilla.suse.com instead of bugs.kde.or</changelog>
<changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
<changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
<changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
<changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
<changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
<changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
<changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
<changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
<changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
<changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
<changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
<changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
<changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
<changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
<changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
<changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
<changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
<changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
<changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>

</package>

<package pkgid="a11efd3d4b14c9b016de18e39440ee508b093232aba5ee31a8aed95cf3217735" name="release-notes-openSUSE" arch="noarch">
    <version epoch="0" ver="42.3.20170731" rel="3.1"/>

<changelog author="ke@suse.de" date="1444651200">- 42.1.20151012 (bsc#949491):
- New entries: grep update (bsc#932494); Base System Installation
  (bsc#947712).</changelog>
<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>
<changelog author="sknorr@suse.com" date="1453896000">- 42.1.20160127:
- Post-GA update
- Added entries:
  + Btrfs disk space leak (bsc#953985)
  + No screensaver in KDE (bsc#956173)
- Changed entries
  + Numerous spelling, grammar, punctuation fixes</changelog>
<changelog author="sknorr@suse.com" date="1455710400">- 42.1.20160217 (tracked in bsc#967075):
- Post-GA update
- Take release notes from the correct Git branch (we accidentally
  used the Tumbleweed RN last time) (bsc#965691)
- Add necessary CJK fonts to spec file (bsc#965462)</changelog>
<changelog author="sknorr@suse.com" date="1469707200">- Initial release for openSUSE Leap 42.2
- Updated to use DocBook with Profiling
- Various Makefile updates</changelog>
<changelog author="sknorr@suse.com" date="1473940800">- 42.2.20160915
- Updated Makefile:
  - Added missing sed line for English XML file (bsc#996528)
- Entry changes:
  - Added hint for users of GNOME &amp; Synaptics driver (bsc#981924)
  - Added note about /var/cache conversion (bsc#989799, FATE#320834)
  - Added back upgrade notes from the 42.1 release notes
  - Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1475236800">- 42.2.20160930
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1477569600">- 42.2.20161027
- Updated Makefile
- Added note on Nouveau driver (boo#1005323)
- Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1478606400">- 42.2.20161108
- Updated Makefile
- Disable special treatment for en_GB (bsc#1008192)
- KDE PIM entry (boo#1001872)
- Consistently use bugzilla.opensuse.org (boo#1008437)
- Updated note on Nouveau driver</changelog>
<changelog author="sknorr@suse.com" date="1481544000">- 42.2.20161212 (tracked in bsc#1009123)
- Updated Makefile
- Updated translations
- Added note on Dolphin and extended permission bits (boo#1009275)
- Added note on AArch64 Page Size (boo#998663)
- Added note on GNOME Shell not locking without GDM (boo#995062)
- Added note on Mount by Label installer crash (boo#1009493)
- Added warning to section about Btrfs disk space leak (boo#1010575)
- Added nodejs to list of renamed packages
- Removed Seamonkey from list of replaced packages (boo#1014686)</changelog>
<changelog author="sknorr@suse.com" date="1487592000">- 42.3.20170220 (bsc#933411)
- Initial package for openSUSE Leap 42.3</changelog>
<changelog author="sknorr@suse.com" date="1494244800">- 42.3.20170508
- Updated translations
- Added entries related to KDE (PIM, Baloo, global menu, synaptics
    driver)
- Added note about fontinfo having been removed</changelog>
<changelog author="sknorr@suse.com" date="1498046400">- 42.3.20170621
- Updated translations
- Added note about installation of Nvidia's .run packages
  (boo#1045124)</changelog>
<changelog author="sknorr@suse.com" date="1499169600">- 42.3.20170704
- Updated translations
- Shorewall package upgraded to 5.1.4.3
- perl-Mojolicious-Plugin-Bootstrap3 replaced by
    perl-Mojolicious-Plugin-AssetPack</changelog>
<changelog author="sknorr@suse.com" date="1500033600">- 42.3.20170714
- Updated translations
- Added more removed/replaced packages to list
- Konqueror now also cannot set extended permission bits (bsc#1048392)</changelog>
<changelog author="sseebergelverfeldt@suse.com" date="1501502400">- 42.3.20170731
- Description about kernel graphics update (boo#1050519)</changelog>

</package>

<package pkgid="f4f4bff9f1ecf073c151351197a79ac6d4fc4eb474853c474c37990907f0ddcf" name="release-notes-openSUSE" arch="src">
    <version epoch="0" ver="42.3.20170731" rel="3.1"/>

<changelog author="ke@suse.de" date="1444651200">- 42.1.20151012 (bsc#949491):
- New entries: grep update (bsc#932494); Base System Installation
  (bsc#947712).</changelog>
<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>
<changelog author="sknorr@suse.com" date="1453896000">- 42.1.20160127:
- Post-GA update
- Added entries:
  + Btrfs disk space leak (bsc#953985)
  + No screensaver in KDE (bsc#956173)
- Changed entries
  + Numerous spelling, grammar, punctuation fixes</changelog>
<changelog author="sknorr@suse.com" date="1455710400">- 42.1.20160217 (tracked in bsc#967075):
- Post-GA update
- Take release notes from the correct Git branch (we accidentally
  used the Tumbleweed RN last time) (bsc#965691)
- Add necessary CJK fonts to spec file (bsc#965462)</changelog>
<changelog author="sknorr@suse.com" date="1469707200">- Initial release for openSUSE Leap 42.2
- Updated to use DocBook with Profiling
- Various Makefile updates</changelog>
<changelog author="sknorr@suse.com" date="1473940800">- 42.2.20160915
- Updated Makefile:
  - Added missing sed line for English XML file (bsc#996528)
- Entry changes:
  - Added hint for users of GNOME &amp; Synaptics driver (bsc#981924)
  - Added note about /var/cache conversion (bsc#989799, FATE#320834)
  - Added back upgrade notes from the 42.1 release notes
  - Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1475236800">- 42.2.20160930
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1477569600">- 42.2.20161027
- Updated Makefile
- Added note on Nouveau driver (boo#1005323)
- Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1478606400">- 42.2.20161108
- Updated Makefile
- Disable special treatment for en_GB (bsc#1008192)
- KDE PIM entry (boo#1001872)
- Consistently use bugzilla.opensuse.org (boo#1008437)
- Updated note on Nouveau driver</changelog>
<changelog author="sknorr@suse.com" date="1481544000">- 42.2.20161212 (tracked in bsc#1009123)
- Updated Makefile
- Updated translations
- Added note on Dolphin and extended permission bits (boo#1009275)
- Added note on AArch64 Page Size (boo#998663)
- Added note on GNOME Shell not locking without GDM (boo#995062)
- Added note on Mount by Label installer crash (boo#1009493)
- Added warning to section about Btrfs disk space leak (boo#1010575)
- Added nodejs to list of renamed packages
- Removed Seamonkey from list of replaced packages (boo#1014686)</changelog>
<changelog author="sknorr@suse.com" date="1487592000">- 42.3.20170220 (bsc#933411)
- Initial package for openSUSE Leap 42.3</changelog>
<changelog author="sknorr@suse.com" date="1494244800">- 42.3.20170508
- Updated translations
- Added entries related to KDE (PIM, Baloo, global menu, synaptics
    driver)
- Added note about fontinfo having been removed</changelog>
<changelog author="sknorr@suse.com" date="1498046400">- 42.3.20170621
- Updated translations
- Added note about installation of Nvidia's .run packages
  (boo#1045124)</changelog>
<changelog author="sknorr@suse.com" date="1499169600">- 42.3.20170704
- Updated translations
- Shorewall package upgraded to 5.1.4.3
- perl-Mojolicious-Plugin-Bootstrap3 replaced by
    perl-Mojolicious-Plugin-AssetPack</changelog>
<changelog author="sknorr@suse.com" date="1500033600">- 42.3.20170714
- Updated translations
- Added more removed/replaced packages to list
- Konqueror now also cannot set extended permission bits (bsc#1048392)</changelog>
<changelog author="sseebergelverfeldt@suse.com" date="1501502400">- 42.3.20170731
- Description about kernel graphics update (boo#1050519)</changelog>

</package>

</otherdata>